[ivila]

Update direct dependencies in the crates workspace and examples, refresh the tracked lockfiles, and remove unused workspace dependencies.

• bincode stays at 1.3.3 because upgrading to 2.x/3.x is a breaking change in both API and wire format (3.0.0 is only a compile-error tombstone)
• burn stays at 0.17 because newer releases pull in std-only dependencies and rely on runtime OS/device detection, which breaks the no_std MNIST TAs.
• rustls_provider keeps its local getrandom 0.2 dependency for rustls-rustcrypto's rand_core/OsRng.