chore: refresh dependencies and bump all plugins

[lucarlig]

Summary

• refresh the Rust workspace with cargo update
• refresh the Python workspace with uv lock --upgrade
• absorb the open Dependabot updates for h2 4.4.1 (chore(deps): bump h2 from 4.3.0 to 4.4.1 #175), cryptography 50.0.0 (chore(deps): bump cryptography from 49.0.0 to 50.0.0 #176), and rcgen 0.14.10 (chore(deps): bump rcgen from 0.14.9 to 0.14.10 in the rust-minor-patch group #178)
• include the latest permitted dependency releases as of 2026-09-07, including redis 1.7.0, cryptography 50.0.1, maturin 1.15.0, and mcp 1.29.1
• bump all eight plugin patch versions and keep package manifests synchronized:
  • encoded-exfil-detection: 0.3.7 → 0.3.8
  • pii-filter: 0.3.7 → 0.3.8
  • rate-limiter: 0.1.8 → 0.1.9
  • retry-with-backoff: 0.3.8 → 0.3.9
  • secrets-detection: 0.3.11 → 0.3.12
  • sql-sanitizer: 0.1.1 → 0.1.2
  • url-reputation: 0.3.6 → 0.3.7
  • ica-metering-exporter: 0.1.0 → 0.1.1

Supersedes #175, #176, and #178. Close those Dependabot PRs after this PR merges.

Validation

• cargo metadata --locked --no-deps --format-version 1
• uv lock --check
• make plugins-validate
• cargo fmt --all --check
• cargo clippy --workspace --all-targets --all-features -- -D warnings
• cargo deny --all-features check advisories --config deny.toml
• all eight plugin make ci targets, including wheel builds and plugin-framework integration tests

[msureshkumar88]

Reviewed diff, CI (96 pass / 0 fail, 4 wheel legs in-progress on ppc64le/s390x/sdist), version consistency across all 8 plugins' Cargo.toml/pyproject.toml/plugin-manifest.yaml/lockfiles (0 mismatches), and dependency changes (105 version bumps, 0 downgrades). Two major bumps (cryptography 49->50, pem 3->4) are both transitive/dev-only, no runtime blast radius. security-policy (cargo deny) job passed. Minimal, correctly scoped, no unrelated changes. Approving.

Non-blocking nit: PR body could use Closes #175/#176/#178 instead of manual-close prose.

[gandhipratik203]

LGTM, thanks for the dependency updates. Keeps the repo up to date.