Fix security vulnerabilities

- lru 0.12.5 → 0.16.3 (fixes RUSTSEC IterMut Stacked Borrows)
- flatted: npm audit fix (Prototype Pollution via parse())
- picomatch: npm audit fix (Method Injection in POSIX classes)
- brace-expansion: npm audit fix (zero-step sequence DoS)

Note: glib 0.18.5 (RUSTSEC-2024-0429, VariantStrIter unsoundness)
is a transitive dependency of Tauri's GTK bindings pinned at 0.18.x.
Fix requires glib ≥0.20.0 which needs a Tauri major version bump.
Not exploitable in get_MNV (we don't use VariantStrIter).

Author: Paururo

Cargo.lock

@@ -23,7 +23,7 @@ serde = { version = "1.0.218", features = ["derive"] }
 serde_json = "1.0.140"
 csv = "1.3.1"
 # protein-translate removed: replaced with inline codon table (C3)
-lru = "0.12"
+lru = "0.16"
 rayon = "1.8"
 # thiserror removed: AppError now implements std::error::Error manually with source chains
 sha2 = "0.10.8"