bump tox version to latest

because tools up-to-date is always good from a security standpoint.