deps: update salvo to 0.89.2 and zip to 7.2.0

[AlexMikhalev]

This PR updates major dependencies:

Changes

• salvo: 0.74.3 → 0.89.2 (includes security fixes)
• zip: 2.4.2 → 7.2.0

Security Fixes in salvo 0.89.2

• CSRF timing attack prevention (constant-time comparison)
• Session secret key validation (64 bytes minimum)
• Path traversal protection in serve-static
• Upload ID validation in TUS

Breaking Change Fixed

• TcpListener::new() now requires 'static address parameter
• Fixed in: crates/terraphim_github_runner_server/src/main.rs:426
• Changed from TcpListener::new(&addr) to TcpListener::new(addr)

Testing

• ✅ cargo check --workspace passes
• ✅ cargo test --workspace --lib passes (108 tests)

Related PRs

Closes: #618 (salvo update)
Closes: #614 (zip update)