chore(deps): bump kube 3.1 -> 4.0 and k8s-openapi 0.27 -> 0.28

kube 3.1 pins k8s-openapi ^0.27, so moving to k8s-openapi 0.28 requires
kube 4.0 (which requires ^0.28). Purely a dependency bump — no source
changes; cargo check --all-targets, clippy, and the unit suite all pass
unchanged. kube_quantity 0.9's loose k8s-openapi (^0) unifies onto 0.28.

Also fully-specs the remaining loose dependency versions
(mimalloc/tokio-postgres/tower-http/bytes/http/http-body-util/tower) to
their resolved versions, per the all-versions-fully-specced rule.

kube 4.0 is a major release: this is compile- and unit-clean, but the
integration suite (CI) should validate runtime behaviour (watchers,
events, patches) before merge.

Author: passcod

Cargo.lock

@@ -15,10 +15,10 @@ futures = "0.3.31"
 globset = "0.4.18"
 handlebars = "6.4.1"
 jiff = { version = "0.2.25", features = ["serde"] }
-k8s-openapi = { version = "0.27.1", features = ["latest", "schemars"] }
-kube = { version = "3.1.0", default-features = false, features = ["runtime", "derive", "client", "rustls-tls", "ws"] }
+k8s-openapi = { version = "0.28.0", features = ["latest", "schemars"] }
+kube = { version = "4.0.0", default-features = false, features = ["runtime", "derive", "client", "rustls-tls", "ws"] }
 kube_quantity = "0.9.0"
-mimalloc = { version = "0.1", default-features = false }
+mimalloc = { version = "0.1.52", default-features = false }
 prometheus = "0.14.0"
 rand = "0.10.1"
 reqwest = { version = "0.13.4", features = ["json", "socks"] }
@@ -31,18 +31,18 @@ sha2 = "0.10.9"
 socket2 = "0.6.2"
 thiserror = "2.0.18"
 tokio = { version = "1.50.0", features = ["full"] }
-tokio-postgres = "0.7"
-tower-http = { version = "0.6", features = ["trace"] }
+tokio-postgres = "0.7.18"
+tower-http = { version = "0.6.11", features = ["trace"] }
 tracing = "0.1.44"
 tracing-subscriber = { version = "0.3.23", features = ["json", "env-filter"] }
 uuid = { version = "1.23.4", features = ["v4", "serde"] }
 
 [dev-dependencies]
-bytes = "1"
-http = "1"
-http-body-util = "0.1"
+bytes = "1.12.0"
+http = "1.4.2"
+http-body-util = "0.1.3"
 tempfile = "3.27.0"
-tower = "0.5"
+tower = "0.5.3"
 
 [[bin]]
 name = "canopy-proxy"