deps: update crates with published security fixes

[fastrevmd-lab]

Summary

Lockfile-only update; no manifest or source changes.

Advisory	Crate	Old -> New
RUSTSEC-2026-0346	rustls	0.23.45 -> 0.23.46
RUSTSEC-2026-0347	rustls	0.23.45 -> 0.23.46
RUSTSEC-2026-0348	rustls	0.23.45 -> 0.23.46
RUSTSEC-2026-0349	rustls	0.23.45 -> 0.23.46

• Yanked: der 0.8.0 -> 0.8.2, wnaf 0.14.0 -> 0.14.1 (non-yanked releases; cargo update -p only)
• Note: ci: least-privilege CI token, sanitize example/test output, update TLS dependency #134 also bumps rustls in Cargo.lock; the rustls change is identical, so whichever merges second rebases cleanly.

Verification

cargo audit clean; fmt, clippy (-D warnings) and tests pass per CI configuration.

🤖 Generated with Claude Code

Paperclip: MEC-3101

Paperclip: MEC-3109