Use allowlist_externals instead of whitelist_externals

Solves the pipline test error:

py38: failed with /bin/sh (resolves to /bin/sh) is not allowed, use allowlist_externals to allow it

See: https://github.com/thedrow/tox-pyo3/issues/2