Fix unic RustSec advisory via patched piet (#1519)

* Fix unic RustSec advisory via patched piet

Patch piet to the upstream commit that replaces the unmaintained unic-bidi dependency with icu_properties. Bump Rust toolchain references to 1.92 because the upstream piet fix requires it, and refresh Cargo.lock so the unic advisory crates are removed.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* Keep core MSRV at Rust 1.89

Restore the workspace and CI toolchains to Rust 1.89 while leaving the patched piet dependency scoped to trace_dump. Document trace_dump's Rust 1.92 requirement locally.

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Scope piet fix to trace dump

Use the fixed upstream piet commit directly from trace_dump instead of a workspace-level crates.io patch. This keeps the dependency override next to the only package that needs it while preserving removal of the unic advisory crates.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

---------

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: jsturtevant

Cargo.lock

@@ -3,10 +3,13 @@ name = "trace_dump"
 version = "0.10.0"
 publish = false
 edition = "2021"
+rust-version = "1.92"
 
 [dependencies]
 addr2line = "0.26.1"
-piet-common = { version = "0.8.0", features = [ "png" ] }
+# Fixes #1490 through #1495 by using upstream piet commit 618083f,
+# which replaces the unmaintained unic-bidi dependency with icu_properties.
+piet-common = { git = "https://github.com/linebender/piet", rev = "618083f8a6671c7ab8c198724487348d2ccf9a8f", features = [ "png" ] }
 blake3 = { version = "1.8.5" }
 
 [[bin]]