fix: update bytes and tracing-subscriber for security advisories

- bytes 1.10.1 -> 1.11.1 (RUSTSEC-2026-0007: integer overflow)
- tracing-subscriber 0.3.19 -> 0.3.20
- Ignore RUSTSEC-2023-0071 (rsa Marvin Attack) - no fix available,
  comes from sqlx-mysql which we don't use

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: haasonsaas

Cargo.lock

@@ -0,0 +1,4 @@
+[advisories]
+# rsa: Marvin Attack timing sidechannel - no fix available.
+# Dependency comes from sqlx-mysql which we don't use (postgres only).
+ignore = ["RUSTSEC-2023-0071"]