Update transitive toml dependency to patched 4.3.0

[elijahwander]

Update the locked transitive toml dependency from 4.1.2 to 4.3.0, within Effect's existing ^4.1.1 range. This addresses GHSA-82x6-q7mm-w9cf / CVE-2026-77465, fixed in 4.2.0 and later. The lockfile now includes the updated package's registry URL and integrity hash; no direct dependency ranges change.

Dependency path: @opencode-ai/plugin@1.17.15 → effect@4.0.0-beta.83 → toml.

Validation on Node 26.8.2:

• npm ci --ignore-scripts succeeded. The existing pinned Git core dependency was built separately from its reviewed source because script suppression omits its generated dist files.
• Typecheck and build passed; all 143 tests passed (TMPDIR=/private/tmp).
• npm audit reports zero known vulnerabilities, down from one high-severity advisory.
• Normal TOML parsing succeeds; a 3,000-level nested array now receives a controlled maximum-depth error instead of RangeError.

No path from intercom messages to the TOML parser was demonstrated; this fixes a known vulnerable installed dependency rather than claiming a reproduced remote adapter exploit.