fix: update Cargo.lock to resolve cargo-deny advisories

[staging-devin-ai-integration]

Summary

Updates transitive dependencies in Cargo.lock to fix cargo deny check advisories failures in CI (e.g. this run):

• rustls-webpki 0.103.12 → 0.103.13 — fixes RUSTSEC-2026-0104 (reachable panic in CRL parsing)
• gimli 0.33.1 → 0.33.0 — replaces yanked version
• bitstream-io 4.9.0 → 4.10.0 — removes dependency on yanked core2 0.4.0

No source code changes; only Cargo.lock is updated.

Review & Testing Checklist for Human

• Verify cargo deny check advisories passes in CI
• Confirm no unexpected dependency version changes beyond the three listed above

Notes

This is a lockfile-only update with no functional code changes. The vulnerability (RUSTSEC-2026-0104) affects rustls-webpki CRL parsing — applications not using CRLs are unaffected, but updating resolves the advisory and unblocks CI.

Link to Devin session: https://staging.itsdev.in/sessions/1b2775010a604bcdacd9ed6155732692
Requested by: @streamer45

---

[staging-devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

Debug

Playground

[staging-devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring