chore: Bump rand to 0.9

[poljar]

This requires that our dependencies bump to rand 0.3 first, this includes the Dalek crates and RustCrypto based ones.

Requires:

• Bump rand_core to 0.9  dalek-cryptography/curve25519-dalek#777
• build(deps): bump the all-deps group with 12 updates RustCrypto/traits#1800

This is now mostly ready, we're just waiting for our deps to do a release. We're currently depending on release candidates.

[codspeed-hq]

CodSpeed Performance Report

Merging this PR will not alter performance

_{Comparing poljar/bump-rand (3cfe13f) with main (a4807ce)}

Summary

✅ 6 untouched benchmarks

[dkasak]

I just reviewed this and the changes look sane. We're still waiting for the crate to get a proper (non-RC) release and then @poljar will undraft the PR. Note to self: If there are no substantial changes between now and then, just approve the PR.