security update

Rust 1.94.1 patches regressions and Cargo CVEs

Rust 1.94.1 fixes three regressions and ships a Cargo tar update that addresses CVE-2026-33055 and CVE-2026-33056.