chore: bump deps to resolve OSV vulnerabilities

[SVilgelm]

Reduce known vulnerabilities from 17 to 1:

• cargo update: openssl 0.10.78, aws-lc-sys 0.40.0, rustls-webpki 0.103.13, rustls 0.23.40, rand 0.8.6 / 0.9.4
• axum-server 0.7 → 0.8 (drops vulnerable rustls-pemfile@2.2.0); add SocketAddr generic to Handle usages
• wiremock 0.5 → 0.6 (drops vulnerable instant@0.1.13 and rand@0.7.3); migrate test_streamable_http_client to http-crate types

Residual: rsa@0.9.10 (RUSTSEC-2023-0071) via oauth2-test-server, a dev-dependency only with no upstream fix.

Fixes: #140

[Copilot]

Pull request overview

This PR updates workspace dependencies (notably TLS/HTTP stack and test tooling) to reduce known OSV-reported vulnerabilities, including upgrading axum-server and wiremock, and refreshing Cargo.lock accordingly.

Changes:

• Bump axum-server from 0.7 to 0.8 and update server handle types to the new generic Handle<SocketAddr> API.
• Bump wiremock from 0.5 to 0.6 and adjust the streamable HTTP client integration test to use http-crate header/method types.
• Refresh Cargo.lock via dependency updates to pull patched transitive versions (e.g., rustls, openssl, aws-lc-sys, rand).

Reviewed changes

Copilot reviewed 6 out of 7 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
crates/rust-mcp-transport/Cargo.toml	Updates dev-dependency wiremock to 0.6 to remove vulnerable transitive deps in test tooling.
crates/rust-mcp-sdk/tests/test_streamable_http_client.rs	Migrates test assertions to wiremock 0.6 request/header/method APIs.
crates/rust-mcp-sdk/src/hyper_servers/server.rs	Adapts HyperServer to axum-server 0.8 by using Handle<SocketAddr> and updating signatures accordingly.
crates/rust-mcp-sdk/src/hyper_servers/hyper_runtime.rs	Updates runtime struct field type for the new axum-server handle generic.
crates/rust-mcp-sdk/Cargo.toml	Bumps axum-server to 0.8 and wiremock to 0.6 for the SDK crate.
Cargo.toml	Bumps workspace axum-server to 0.8 so workspace crates share the updated server implementation.
Cargo.lock	Large lockfile refresh reflecting patched dependency graph after cargo update and version bumps.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[SVilgelm]

@hashemix, Hi, could you please check this PR? Thank you

[hashemix]

Hey @SVilgelm , would you mind fixing the issues causing the check to fail: https://github.com/rust-mcp-stack/rust-mcp-sdk/actions/runs/26002112188/job/76427154767?pr=142

to reproduce that locally, with rust 1.95.0 run:

cargo make check

[SVilgelm]

Sure, will do it tonight

[SVilgelm]

fixed all issues