chore(deps): update Cargo.lock

[decofe]

Refresh direct and transitive registry dependencies in Cargo.lock with a seven-day minimum publication age to unblock stalled Dependabot updates. Keep already-locked releases newer than the cutoff in place; manifests, pinned git revisions and Dependabot configuration are unchanged.

Update policy and validation

• Only Cargo.lock changes. Dependency declarations, git revisions and Dependabot configuration are unchanged.
• Newly selected registry versions have at least seven days of publication history; already-locked younger versions are retained.
• Registry publication timestamps and checksums were checked against the Cargo index. cargo metadata --locked --format-version=1 passed; compilation, tests and all-feature checks were not run locally.
• Package links open the selected version's upstream release or packaged changelog when available, otherwise its published crate source. Rows labeled Manifest contain metadata observations, not claims about code changes. Where no release note was located, source review remains necessary.

Per-dependency changes

Scope: D = declared by a workspace member (including optional/build/dev dependencies); T = transitive. Manifest observations compare normal/build dependency names and version ranges, including optional/target-specific declarations, not enabled features.

Dependency	Previous → selected	Scope and purpose	Release details / resolved impact
js-sys	0.3.104 → 0.3.106	T: JavaScript standard-library bindings.	Updates JavaScript bindings in the coordinated release; Rust 1.81 minimum. Declared Rust minimum 1.77→1.81.
wasm-bindgen	0.2.127 → 0.2.129	T: Rust/JavaScript interoperation runtime.	Adds experimental Emscripten JSPI integration, macro fixes and no_std JsError conversion; Rust 1.81 minimum. Declared Rust minimum 1.77→1.81.
wasm-bindgen-futures	0.4.77 → 0.4.79	T: Rust-future/JavaScript-promise adapters.	Participates in the coordinated async/Emscripten integration update. Declared Rust minimum 1.77→1.81.
wasm-bindgen-macro	0.2.127 → 0.2.129	T: Binding-generation attribute macro.	Updates generated bindings for the coordinated release, including impl crate-path and field-getter fixes. Declared Rust minimum 1.77→1.81.
wasm-bindgen-macro-support	0.2.127 → 0.2.129	T: Binding macro implementation.	Updates macro implementation for the coordinated Emscripten and generated-binding changes. Declared Rust minimum 1.77→1.81.
wasm-bindgen-shared	0.2.127 → 0.2.129	T: Shared binding metadata.	Updates shared binding metadata in step with the matching macro/runtime versions. Declared Rust minimum 1.77→1.81.
web-sys	0.3.104 → 0.3.106	T: Browser Web API bindings.	Adds WebGL/WebGPU interfaces and corrects extension type checks; Rust 1.81 minimum. Declared Rust minimum 1.77→1.81.
xxhash-rust	0.8.18 → 0.8.19	D: Implementation of xxhash.	Manifest ranges unchanged.

The lockfile also rewires dependencies for 5 unchanged-version packages. These are resolution-only changes, not additional crate release upgrades; they are visible in the Cargo.lock diff.

Prompted by: @DaniPopes