fix(ci): update rand lockfile entries (#11827)

**Description:**

Updates Cargo.lock so cargo-deny no longer reports RUSTSEC-2026-0097 for
rand. This moves rand 0.8.5 to 0.8.6 and rand 0.9.2 to 0.9.4, staying
within the existing semver-compatible dependency ranges.

**BREAKING CHANGE:**

None.

**Related issue (if exists):**

CI failure:
https://github.com/swc-project/swc/actions/runs/24973953736/job/73122070650

Author: kdy1