fix: update rand to resolve GHSA-cq8v-f236-94qc

[dannyneira]

Summary

• Updates transitive rand lockfile entries from 0.8.5 to 0.8.6 and 0.9.2 to 0.9.3
• Resolves GHSA-cq8v-f236-94qc for both vulnerable locked rand ranges
• No manifest changes or dependency overrides were needed

Vulnerability details

• Advisory: GHSA-cq8v-f236-94qc
• Dependabot alerts:
  • https://github.com/warpdotdev/power-fixer-server/security/dependabot/7
  • https://github.com/warpdotdev/power-fixer-server/security/dependabot/8
• Dependency relationship: transitive/runtime dependency in Cargo.lock
• Patched versions: rand 0.8.6 and rand 0.9.3

Verification

• cargo fmt --check
• cargo check
• cargo test
• cargo clippy --all-targets --all-features -- -D warnings
• cargo audit --json no longer reports a rand advisory; unrelated existing advisories remain for bytes, quinn-proto, rsa, and rustls-webpki.

Conversation: https://staging.warp.dev/conversation/e2c93a7e-043b-483a-b32b-77bd62fef864
Run: https://oz.staging.warp.dev/runs/019e7ec3-80f1-74b9-80ae-99d413bbc9e0

Co-Authored-By: Oz oz-agent@warp.dev
This PR was generated with Oz.