Address dependency warnings

Author: ScriptSmith

.cargo/audit.toml

@@ -3,4 +3,9 @@ ignore = [
     "RUSTSEC-2023-0071",
     # rustls-webpki 0.101.7 via aws-smithy-http-client legacy TLS; cannot upgrade until AWS SDK drops rustls 0.21
     "RUSTSEC-2026-0049",
+    # rand 0.8.5 unsoundness only triggers when a custom `log` implementation calls
+    # `rand::rng()` during trace-level logging. Hadrian uses `tracing-subscriber`, not a
+    # custom `log::Log` implementation, so the affected code path is unreachable. rand
+    # 0.8.5 is pulled in transitively via augurs, kreuzberg, and sqlx-postgres.
+    "RUSTSEC-2026-0097",
 ]