fix: replace unsafe cloudpickle deserialization with json.loads in rollout worker#1612

sebastiondev wants to merge 1 commit intoInternLM:mainInternLM/xtuner:mainfrom

sebastiondev:security/fix-unsafe-cloudpickle-deserializationsebastiondev/xtuner:security/fix-unsafe-cloudpickle-deserializationCopy head branch name to clipboard