⬆️ chore(deps): upgrade all dependencies to latest majors

Proactive upgrade pass: every direct dependency is now on its latest
released major. No open Dependabot alerts drove this.

Major bumps:
- sqlx 0.8.6 -> 0.9.0
- p256 0.13.2 -> 0.14.0 (elliptic-curve 0.13 -> 0.14, ecdsa 0.16 -> 0.17)
- opentelemetry / opentelemetry_sdk / opentelemetry-otlp 0.31 -> 0.32
- tracing-opentelemetry 0.32 -> 0.33
- chrono 0.4.44 -> 0.4.45

Transitive notables: tokio 1.52.2 -> 1.53.0, hyper 1.9.0 -> 1.10.1,
rustls 0.23.40 -> 0.23.42, tonic 0.14.5 -> 0.14.6, whoami 1.6.1 -> 2.1.2.

Changes required:
- sqlx 0.9 removed the combined `runtime-tokio-rustls` feature. Split into
  `runtime-tokio` + `tls-rustls-aws-lc-rs`, picking aws-lc-rs to match the
  provider rustls already uses. This drops `ring` from the production
  dependency graph entirely, so aws-lc-rs is now the single crypto provider.
- sqlx 0.9 added column `origin` metadata to the offline query cache, so
  `.sqlx/` was regenerated with sqlx-cli 0.9.0.
- Bumped the pinned sqlx-cli version in CI and the README from 0.8.6 to
  0.9.0 to match, otherwise `cargo sqlx prepare --check` fails in CI.

No application source changes were needed; the opentelemetry and p256
majors were source-compatible with this crate's usage.

Verified against a local postgres:16 container with the exact CI commands:
cargo sqlx prepare --check, cargo clippy --locked --all-targets (also with
-D warnings), and cargo test --locked -- all 58 tests pass, clippy clean.

Author: luiscosio

.github/workflows/gateway.yml

@@ -42,7 +42,7 @@ jobs:
       - uses: actions/checkout@v5
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
-      - run: cargo install sqlx-cli --version 0.8.6 --locked --no-default-features --features postgres
+      - run: cargo install sqlx-cli --version 0.9.0 --locked --no-default-features --features postgres
       - run: SQLX_OFFLINE=false DATABASE_URL="$TEST_DATABASE_URL" cargo sqlx database setup
       - run: SQLX_OFFLINE=false DATABASE_URL="$TEST_DATABASE_URL" cargo sqlx prepare --check -- --all-targets --locked
       - run: cargo clippy --locked --all-targets