Bump faraday-net_http and marcel within constraints (#79)

Conservative bundle update (lockfile only): faraday-net_http 3.4.2 ->
3.4.3, marcel 1.1.1 -> 1.2.1. devise (5.x) held back by
devise_token_auth; image_processing (2.x) handled separately.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: dadachi

Gemfile.lock

@@ -164,7 +164,7 @@ GEM
       faraday-net_http (>= 2.0, < 3.5)
       json
       logger
-    faraday-net_http (3.4.2)
+    faraday-net_http (3.4.3)
       net-http (~> 0.5)
     ffi (1.17.4-aarch64-linux-gnu)
     ffi (1.17.4-arm-linux-gnu)
@@ -241,7 +241,7 @@ GEM
       importmap-rails
       rails (>= 7.1.0)
       turbo-rails
-    marcel (1.1.1)
+    marcel (1.2.1)
     matrix (0.4.3)
     mini_magick (5.3.1)
       logger