chore(deps): bump rust-minor-patch group and napi 3.15 (#4669)

Bumps the rust-minor-patch group: serde_json 1.0.154, tokio 1.54.1, uuid
1.28.0, reqwest 0.13.5, webbrowser 1.2.5, napi-derive 3.6.13, napi-build
2.6.0, arc-swap 1.9.3, libc 0.2.191.

On top of the Dependabot update:

* napi is bumped to 3.15.0 instead of 3.13.0. napi-derive 3.6.13
generates code that references
`bindgen_prelude::NativeBorrowScopeRelease`, which napi 3.13.0 doesn't
have, so the nodejs crate failed to compile. The napi and napi-derive
floors in `nodejs/Cargo.toml` are raised so they can't drift apart
again.
* The RUSTSEC-2026-0410 ignore from #4683 is removed from `deny.toml`.
#4690 already moved the lockfile to zstd-sys 2.1.2, which fixes it. The
other three zstd ignores stay until we can move to Arrow 59+.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Will Jones <willjones127@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

nodejs/Cargo.toml

@@ -23,7 +23,7 @@ env_logger.workspace = true
 futures.workspace = true
 lancedb.workspace = true
 lance-namespace.workspace = true
-napi = { version = "3.8.3", default-features = false, features = [
+napi = { version = "3.15.0", default-features = false, features = [
     "napi9",
     "async",
     "chrono_date",
@@ -31,7 +31,7 @@ napi = { version = "3.8.3", default-features = false, features = [
 ] }
 chrono.workspace = true
 serde_json.workspace = true
-napi-derive = "3.5.2"
+napi-derive = "3.6.13"
 # Prevent dynamic linking of lzma, which comes from datafusion
 lzma-sys = { version = "0.1", features = ["static"] }
 log.workspace = true