fix(packaging): refresh root Cargo lockfile

[pimlock]

Summary

Refresh the root Cargo lockfile so locked dependency resolution and release packaging succeed. The stale lockfile caused cargo vendor --locked to fail in Release Dev.

Cargo restores the ring edge because the Windows prebuilt-z3 feature enables z3-sys's host-side archive downloader. Its dependency path is z3-sys build dependency -> reqwest -> rustls -> ring. OpenShell's target-side TLS configuration still uses AWS-LC, and ring is not linked into the OpenShell binary. The existing exception in deny.toml documents this build-time-only use and restricts it to the rustls and rustls-webpki wrappers.

Related Issue

No issue required: localized lockfile repair for the failed Release Dev run.

Changes

• Record the missing quinn dependency edge for reqwest
• Record the missing ring dependency edge for rustls

Testing

• cargo vendor --locked --quiet succeeds
• mise run pre-commit passes
• Unit tests added or updated (not applicable: generated lockfile correction)
• E2E tests added or updated (not applicable: packaging metadata only)

Checklist

• Follows Conventional Commits
• Commits are signed off (DCO)