chore: update Rust dependencies

[thedoublejay]

Summary

• Upgrade every eligible direct Rust dependency and refresh the transitive Cargo lockfile.
• Move rmcp from 2.2.0 to 3.1.0, gix from 0.85 to 0.86, and the pinned Oxc parser crates from 0.142.0 to 0.143.0.
• Upgrade ignore, globset, similar, lru, aho-corasick, and regex-automata to their current releases.
• Adapt the TypeScript and JavaScript visitor to the Oxc 0.143 export-declaration and arrow-body AST shapes.
• Keep tree-sitter-typescript pinned at 0.23.2 as requested.
• Audit the website dependency graph; all 485 Bun packages and the declared Astro, Starlight, and Sitemap packages were already current, so no website dependency diff was needed.

Context / Motivation

The workspace dependency inventory showed one major protocol upgrade plus several breaking pre-1.0 upgrades and patch releases. The Oxc release split exported declarations and named re-exports into separate AST variants and introduced a dedicated arrow-function body enum, requiring a small visitor migration to preserve extraction behavior.

Key Decisions

• Preserve existing parser behavior by routing export declarations, local named exports, and named re-exports through distinct Oxc 0.143 variants.
• Visit both block and concise-expression arrow bodies explicitly.
• Keep the existing website semver markers rather than committing a metadata-only Bun lockfile rewrite from version ranges to latest.
• Leave the Gather Step release version at 5.16.3; this PR changes dependencies only.

Files Changed

Area	Change
Workspace Cargo manifest	Update shared direct dependency requirements
MCP manifest	Upgrade rmcp to 3.1.0
Parser manifest	Upgrade the pinned Oxc family to 0.143.0
Oxc visitor	Adapt export and arrow AST handling
Cargo lockfile	Resolve the upgraded direct and transitive graph

Cross-Repo / Rollout Impact

None. The website package graph was verified current but is unchanged.

Verification

• cargo outdated --workspace --root-deps-only --aggressive reports zero eligible outdated dependencies
• cargo check --workspace -j 1
• Oxc exported-declaration regression test
• Extraction-fidelity suite: 32 passed
• bun install --frozen-lockfile
• bun run build: 23 pages built
• typos
• cargo fmt --all --check
• cargo clippy --all-targets --all-features -- -D warnings
• Post-rebase locked Cargo metadata and diff checks
• Full nextest execution: all test artifacts built successfully, but nextest remained in unusually slow test discovery and was stopped when the PR was requested

Follow-ups

• Let CI complete the full nextest suite and dependency-policy gates.

[cloudflare-workers-and-pages]

Deploying gather-step with    Cloudflare Pages

Latest commit:	626e29f
Status:	✅  Deploy successful!
Preview URL:	https://3b30283f.gather-step.pages.dev
Branch Preview URL:	https://chore-update-dependencies.gather-step.pages.dev

View logs