Bump cython asv
We were pulling in an older version, possibly from defaults.

I think we should plan a major update of all these (notably python 3.6 -> 3.8) but that'll require some care to not invalidate the results at pandas.pydata.org/speed/pandas.