Bump [workspace.package].version, internal dependency pins, guest-program
and quote-gen package versions, CLI.md extra-data defaults, and refresh
Cargo.lock files. The risc0 guest Cargo.lock is not refreshed: the
update-cargo-lock target skips it until a risc0 c-kzg fork tag >=2.1.8
exists (its Cargo.toml version is still bumped).