fix: update wasm-bindgen to 0.2.109 for CSP compatibility (#367)

wasm-bindgen 0.2.109 removed the `new Function("return this")` fallback
for getting the global object (PR wasm-bindgen/wasm-bindgen#4910),
which required `'unsafe-eval'` in Content-Security-Policy `script-src`.

With this update, applications using @dimforge/rapier3d-compat can use
the more restrictive `'wasm-unsafe-eval'` instead of `'unsafe-eval'`,
blocking JavaScript eval() while still allowing WebAssembly compilation.

Refs: #366

Author: sawa-zen

builds/prepare_builds/templates/Cargo.toml.tera

@@ -38,7 +38,7 @@ rapier{{ dimension }}d = { version = "0.30.1", features = [
 # The explicit dependency to parry only needed to pin the patch version.
 parry{{ dimension }}d = { version = "^0.25.3" }
 ref-cast = "1"
-wasm-bindgen = "0.2.100"
+wasm-bindgen = "0.2.109"
 js-sys = "0.3"
 nalgebra = "0.34"
 serde = { version = "1", features = ["derive", "rc"] }