Update deps to handle feasible cargo audit vulnerabilities

[benalleng]

This is run only on our most updated Cargo lockfile and was tested with cargo audit -f Cargo-recent.lock

Time@0.3.45 remains as a listed vulnerability due to the current 1.85.0 MSRV limitation imposed by the rest of the ecosystem. This can be confirmed with cargo audit --ignore RUSTSEC-2026-0009 -f Cargo-recent.lock

RUSTSEC-2026-0009 remains trivial for us as it is a dependency of payjoin-test-utils only and not a vulnerability in the main payjoin crate exposed in our library as demonstrated with.

$ cargo tree -p payjoin -i time -e normal
warning: nothing to print.

To find dependencies that require specific target platforms, try to use option `--target all` first,
 and then narrow your search scope accordingly.

Pull Request Checklist

Please confirm the following before requesting review:

• I have disclosed my use of
  AI
  in the body of this PR.
• I have read CONTRIBUTING.md and rebased my branch to produce hygienic commits.

[coveralls]

Coverage Report for CI Build 29267747093

Coverage remained the same at 86.01%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	15876
Covered Lines:	13655
Line Coverage:	86.01%
Coverage Strength:	343.76 hits per line

---

💛 - Coveralls

[spacebear21]

utACK