fix(deps): bump vulnerable crates to patched versions

Cargo.lock bumps for outstanding Dependabot alerts.
Updated 2 crate version(s) across 1 workspace(s).

Updated:
  - [.] gix-fs -> latest (high)
  - [.] lru -> latest (low)

Skipped (Cargo.toml constraint blocks — manifest bump needed):
  - [.] rand@0.9.3 (low, GHSA-cq8v-f236-94qc)
  - [.] rand@0.10.1 (low, GHSA-cq8v-f236-94qc)

Author: hyperpolymath