d2-rs 0.1.4

Matches Go D2 master at 6a7b48378, as 0.1.0 does. Crates only; the npm
package stays at 0.1.3, which is unaffected.

Security

• zip is now only a test dependency of d2-rs-export, so published
  crates no longer depend on it (0.1.3 required zip 6.0.0, which has
  published security advisories, though d2-rs never called it at runtime: PPTX output
  uses the Go-ported writer).
• rustls 0.23.46 for remote icon fetching.

Install: cargo install d2-rs --version 0.1.4. npm: npm install @d2-rs/wasm@0.1.3 (unchanged).