fix(serializer): disable MsgpackSerializer and remove shamaton/msgpack dependency

Disable Marshal and Unmarshal in MsgpackSerializer by converting them into
stubs that return errors. This addresses a security concern in the upstream
shamaton/msgpack library (ref: shamaton/msgpack#60). The type is marked
deprecated and will be removed in a future release.

- Remove github.com/shamaton/msgpack/v3 from go.mod
- Bump github.com/hyp3rd/ewrap from v1.3.8 to v1.3.9

Author: hyp3rd

internal/libs/serializer/msgpack.go

@@ -33,7 +33,7 @@ func (*MsgpackSerializer) Marshal(_ any) ([]byte, error) { // receiver omitted (
 //
 // Deprecated: This method is now a shim and will be removed in a future release for security reasons.
 // REF: https://github.com/shamaton/msgpack/pull/60
-// Please use the `Marshal` method of the `Serializer` interface instead.
+// Please use the `Unmarshal` method of the `Serializer` interface instead.
 func (*MsgpackSerializer) Unmarshal(_ []byte, _ any) error { // receiver omitted (unused)
 	// err := msgpack.Unmarshal(data, v)
 	// if err != nil {