fix(deps): bump hickory-proto to 0.26.3

[tobyhede]

Summary

Lockfile-only update in packages/eql/Cargo.lock to move hickory-proto out of vulnerable ranges.

hickory-proto is transitive: cipherstash-client / stack-auth -> reqwest -> hickory-resolver -> hickory-proto. reqwest 0.13.4 switches to the hickory 0.26 line, so the minimal fix is cargo update -p reqwest --precise 0.13.4.

Package	From	To
reqwest	0.13.3	0.13.4
hickory-resolver	0.25.2	0.26.3
hickory-proto	0.25.2	0.26.3
hickory-net	(new)	0.26.3

Knock-on lock changes: enum-as-inner removed; prefix-trie, system-configuration 0.7, system-configuration-sys 0.6, core-foundation 0.9.4, ndk-context added (pulled in by hickory 0.26).

packages/protect-ffi/Cargo.lock already resolves hickory-proto 0.26.1, so it isn't changed here.

Advisories fixed

• GHSA-q2qq-hmj6-3wpp (fixed in hickory-proto >= 0.26.1)
• GHSA-3v94-mw7p-v465 (affects <= 0.25.2)

Verification

• cargo tree -i hickory-proto --target all in packages/eql: only hickory-proto 0.26.3 remains; no 0.25.x in either Cargo.lock
• cargo check --workspace --lib --bins --locked in packages/eql: passes
• --all-targets wasn't checked locally because the eql_tests test targets include_str! generated fixtures that aren't in the repo. CI covers them.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 12d0ed7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[auxesis]

Thanks @tobyhede!