Security and dependency refresh
Dependabot alert cleanup — A broad Rust dependency upgrade landed to clear all open security alerts, with lockfiles regenerated across the main workspace and workers package.
API and manifest adjustments — The refresh included several nontrivial version jumps in HTTP, OAuth, OpenTelemetry, JWT, and tree-sitter-related crates, plus manifest tweaks to keep reqwest features isolated and switch OTLP export to blocking HTTP.
Other misc changes
Compile updates for upgraded crates — Internal code was adjusted where needed to match the newer auth, tracing, and parser APIs, along with assorted transitive bumps and lockfile churn.