Bump `bitreq` (pending new release)

[luisschwab]

rust-bitcoin/corepc#560

[oleonardolima]

FWIW it's valid to note that bitreq is only a dev-dependency, if anyone else is looking into the vulnerabilities raised by cargo audit job.