fix: update rustix to resolve CVE-2024-43806

[dannyneira]

Summary

• Updates the transitive rustix lockfile entry from 0.37.24 to 0.37.25.
• Resolves Dependabot alert fix: update bytes to resolve CVE-2026-25541 #2 for CVE-2024-43806 / GHSA-c827-hfw6-qwvm.
• Parent dependency path: async-io -> rustix.

Vulnerability

• Advisory: GHSA-c827-hfw6-qwvm
• Dependabot alert: https://github.com/warpdotdev/graphql-ws-client/security/dependabot/2
• Severity: moderate
• Vulnerable range: >= 0.37.0, < 0.37.25
• Patched version: 0.37.25

Dependabot context

Dependabot could not resolve this repo's Rust dependency files because the examples workspace member has a binary target name that conflicts with Cargo's build directory names. This PR works around that by updating the lockfile locally with Cargo.

Verification

• cargo audit --file /workspace/graphql-ws-client/Cargo.lock no longer reports CVE-2024-43806 / rustix; it still reports unrelated existing alerts for bytes, h2, idna, and mio.
• cargo build --manifest-path /workspace/graphql-ws-client/Cargo.toml passes.
• cargo test --manifest-path /workspace/graphql-ws-client/Cargo.toml passes after restoring localhost resolution in the sandbox /etc/hosts.

Conversation: https://staging.warp.dev/conversation/faf03187-5e89-422a-a07c-ca95d40e546d
Run: https://oz.staging.warp.dev/runs/019e3bd0-d46d-7120-88a5-b1f32897b258
This PR was generated with Oz.