chore: update compatible Rust dependencies

[liushuo874]

Summary

/claim #44

Updates the Rust dependencies to the latest semver-compatible versions and refreshes Cargo.lock.

Notable direct dependency updates include:

• tokio 1.36.0 -> 1.52.3
• hyper 0.14.28 -> 0.14.32
• prost / prost-types 0.12.3 -> 0.12.6
• hyper-util 0.1.3 -> 0.1.20
• http-body-util 0.1.0 -> 0.1.3
• anyhow 1.0.82 -> 1.0.102
• tracing 0.1.40 -> 0.1.44
• tracing-subscriber 0.3.18 -> 0.3.23
• gh-workflow 0.5.1 -> 0.5.10

I kept this PR to compatible updates only. The remaining major-version upgrades for tonic, prost, opentelemetry, shuttle, hyper, and gh-workflow require API migrations and would be better handled in a separate focused PR.

Validation

• cargo test --all-features --workspace
• cargo +nightly fmt --check
• cargo +nightly clippy --all-features --workspace -- -D warnings

There is no UI demo for this dependency-only change; the validation commands above are the functional demonstration.

Closes #44.

[liushuo874]

Hi! Just checking in on this dependency update. I kept the PR limited to semver-compatible updates to avoid bundling the larger \ onic\/\opentelemetry\/\shuttle\ API migrations into the same review. Happy to adjust the scope if you would prefer a different dependency subset.