chore: dependency update sweep

Refresh Rust lockfile to latest semver-compatible versions (napi 3.10,
wasm-bindgen 0.2.126, rustls, serde, criterion2 3.0.4, and transitive deps).

Bump JS tooling: fallow 2.103.0, oxlint 1.72.0, oxfmt 0.57.0,
@napi-rs/cli ^3.7.2, @codspeed/tinybench-plugin ^5.7.1, and tinybench to
^6.0.2. The tinybench v6 result shape stays compatible via the codspeed
plugin (peer >=4.0.1) and the defensive helpers in codspeed.mjs.

Author: BartWaardenburg