fix: update dependencies to resolve Dependabot alerts

cargo update / npm audit fix to address known vulnerabilities.

Part of global TODO cleanup (2026-03-16).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath