Fix build break (microsoft#634)

* fix: update bindings and builtins for breaking dependency upgrades

- Update rand 0.10 API: use RngExt trait instead of removed Rng trait
- Update jsonschema 0.45 API: replace removed BasicOutput/apply with
  iter_errors for schema validation
- Update jni 0.22 API: migrate from deprecated JNIEnv to EnvUnowned
  with_env pattern, replace deprecated get_string/new_string/throw
  methods with their modern equivalents
- Update pyo3 0.28 API: replace removed PyObject with Py<PyAny>,
  deprecated downcast with cast, and removed with_gil with attach

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

* ci(dependabot): create per-dependency PRs for Cargo updates

Remove the groups.rust-dependencies catch-all group so Dependabot
opens a separate PR for each Cargo dependency update instead of
bundling them all into a single PR.

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

* fix: enable getrandom wasm_js feature for wasm32-unknown-unknown builds

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

* fix: address PR review comments

- Stream iter_errors directly into BTreeSet without intermediate Vec
- Use JNI_TRUE/JNI_FALSE for jboolean instead of bool coercion

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

---------

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

Author: anakrish

.github/dependabot.yml

@@ -8,8 +8,8 @@
 version: 2
 updates:
   # All Rust/Cargo directories are grouped into a single entry so that
-  # when a dependency is updated, Dependabot creates ONE PR that bumps it
-  # across the root workspace AND every binding, preventing version skew.
+  # when a dependency is updated, Dependabot bumps it across the root
+  # workspace AND every binding, preventing version skew.
   - package-ecosystem: "cargo"
     directories:
       - "/"
@@ -22,10 +22,6 @@ updates:
       interval: "weekly"
     commit-message:
       prefix: "build(deps)"
-    groups:
-      rust-dependencies:
-        patterns:
-          - "*"
     # Ignore vendored mimalloc crates; updates are managed manually.
     ignore:
       - dependency-name: "regorus-mimalloc"