chore: bump transitive deps (compat sweep)

[radiosilence]

Summary

Routine cargo update to pick up latest compat-range transitive bumps. No Cargo.toml range widening — just Cargo.lock refresh.

• kreuzberg-pdfium-render 4.8.5 -> 4.8.6
• libbz2-rs-sys 0.2.2 -> 0.2.3
• portable-atomic-util 0.2.6 -> 0.2.7
• pxfm 0.1.28 -> 0.1.29
• tokio 1.52.0 -> 1.52.1
• wasip2 1.0.2 -> 1.0.3
• wit-bindgen 0.57.1 (new transitive)

Test plan

• `cargo test` — 82 passing
• `cargo clippy --all-targets -- -D warnings` — clean
• `cargo fmt -- --check` — clean
• `cargo audit` — 0 vulns (1 warning: `paste` unmaintained, transitive via rav1e, unavoidable without dropping AVIF)
• CI green

🤖 Generated with Claude Code