[codeandsolder]

Batch the current passive maintenance queue into one update.

Updates:

• base64 0.22 -> 0.23
• jsonwebtoken 10 -> 11
• tokio 1.52 -> 1.53
• uuid 1.23 -> 1.26
• refresh Cargo.lock for compatible/transitive updates
• align wasm-bindgen-cli tooling to 0.2.128 after the lockfile refresh advanced wasm-bindgen to 0.2.128

Two queued upgrades are currently blocked by upstream compatibility and remain open:

• deps: upgrade testcontainers #14: testcontainers 0.28 cannot coexist with testcontainers-modules 0.15, which requires testcontainers ^0.27.
• deps: upgrade validator #16: validator 0.21 cannot be used with axum-valid 0.25, whose validator integration depends on validator 0.20; using both versions breaks the Valid<...> extractor trait bounds.

Closes #11
Closes #12
Closes #13
Closes #15
Closes #17

Issues #14 and #16 are intentionally not closed so the passive queue can retry when their upstream compatibility catches up.