chore: bump deps and relax manifest ranges (#250)

Move direct deps to minor-pinned ranges so patch updates flow without churn while keeping compatibility boundaries clear. Refresh lock with cargo update (zerocopy* bump) and verify via fmt, clippy, tests, examples, release build, and a real json run.

Author: code-inflation

Cargo.lock

@@ -13,11 +13,11 @@ exclude = [".github/"]
 [dependencies]
 log = "0.4"
 env_logger = "0.11"
-regex = "1.10"
-reqwest = { version = "0.12", default-features = false, features = ["blocking", "rustls-tls"] }
-clap = { version = "4.5.43", features = ["derive"] }
-serde = { version = "1.0.219", features = ["derive"] }
+regex = "1.12"
+reqwest = { version = "0.12.24", default-features = false, features = ["blocking", "rustls-tls"] }
+clap = { version = "4.5", features = ["derive"] }
+serde = { version = "1.0", features = ["derive"] }
 csv = "1.3.0"
 serde_json = { version = "1.0", features = ["preserve_order"] }
-indexmap = "2.9.0"
+indexmap = "2.12"
 clap_complete = "4.5"