#25 Audit workspace dependencies for consolidation and upgrades

Audit Results

Workspace consolidation candidates (used in 2+ crates, not yet workspace deps)

| Dep | core | cli | appview | Action | |-----|------|-----|---------|--------| | clap 4 (derive) | - | ✓ | ✓ | hoist to workspace | | ed25519-dalek 2 (rand_core) | ✓ | - | ✓ | hoist to workspace | | tokio 1 | dev | full | full | hoist to workspace (full) | | toml 0.8 | - | ✓ | ✓ | hoist to workspace | | env_logger 0.11 | - | ✓ | ✓ | hoist to workspace | | tempfile 3 | - | dev | dev | hoist to workspace dev-deps |

reqwest version mismatch

• CLI: reqwest 0.13 (features: json, rustls)
• Appview: reqwest 0.12 (features: json, rustls-tls)
• Two copies resolving in the lockfile. Should align to 0.13.

tower_governor outdated

• Installed: 0.6.0
• Latest: 0.8.0
• Just added this session, should use latest.

Crypto crates — all prerelease-only updates

• ed25519-dalek 2.2.0 (latest stable, 3.0 is -pre.6)
• x25519-dalek 2.0.1 (latest stable, 3.0 is -pre.6)
• aes-gcm 0.10.3 (latest stable, 0.11 is -rc.3)
• aes-kw 0.2.1 (latest stable, 0.3 is -rc.2)
• No action — stay on stable releases.

Everything else — already at latest

clap, axum, rusqlite, tokio-tungstenite, rustls, futures-util, tower, etc.