chore: refresh dependencies and bump all plugins

[lucarlig]

Summary

• refresh the Rust workspace with cargo update (65 package changes)
• refresh the Python workspace with uv lock --upgrade (26 package changes)
• absorb the open Dependabot updates for h2 4.4.1 (chore(deps): bump h2 from 4.3.0 to 4.4.1 #175) and cryptography 50.0.0 (chore(deps): bump cryptography from 49.0.0 to 50.0.0 #176)
• bump all eight plugin patch versions and keep package manifests synchronized:
  • encoded-exfil-detection: 0.3.7 → 0.3.8
  • pii-filter: 0.3.7 → 0.3.8
  • rate-limiter: 0.1.8 → 0.1.9
  • retry-with-backoff: 0.3.8 → 0.3.9
  • secrets-detection: 0.3.11 → 0.3.12
  • sql-sanitizer: 0.1.1 → 0.1.2
  • url-reputation: 0.3.6 → 0.3.7
  • ica-metering-exporter: 0.1.0 → 0.1.1

Supersedes #175 and #176. Close those Dependabot PRs after this PR merges.

Validation

• cargo metadata --locked --no-deps --format-version 1
• uv lock --check
• make plugins-validate
• cargo fmt --all --check
• cargo check --workspace --all-targets --all-features
• cargo clippy --workspace --all-targets --all-features -- -D warnings
• cargo deny --all-features check advisories --config deny.toml
• all eight plugin make ci targets, including wheel builds and plugin-framework integration tests