fix(core): pin time below incompatible 0.3.52

[sundy-li]

Summary

• constrain the direct time dependency used with cookie 0.18.1 to versions below 0.3.52
• prevent Node.js binding CI from resolving the incompatible time parsing API change that breaks cookie compilation

Verification

• cargo metadata --format-version 1 --manifest-path bindings/nodejs/Cargo.toml --locked --no-deps
• cd bindings/nodejs && pnpm prettier --check .

Notes

• The failing CI job was build-nodejs in run 28484676819. Its log showed cookie 0.18.1 failing against time 0.3.52 with E0061 because time::parsing::Parsable::parse now requires a second defaults argument.
• Full local pnpm napi build / cargo build could not complete because local crates.io access repeatedly timed out while downloading the index.

[youngsofun]

retry suceeded https://github.com/databendlabs/bendsql/actions/runs/28484676819
bug seems to be fixed by time v0.3.53 just release https://crates.io/crates/time