chore(deps): refresh lockfile and upgrade ruoqa to 0.2

[mimi1vx]

Summary

• Refresh Cargo.lock: a plain cargo update moving 37 transitive crates, all within existing semver ranges and MSRV-1.96-compatible. Cargo.toml is untouched by this commit.
• Upgrade ruoqa 0.1.4 → 0.2. No mtui call sites change; the API surface mtui uses is unchanged upstream.

User-visible changes from the ruoqa upgrade

• client.conf discovery is now tiered and non-merging: $OPENQA_CONFIG (when set), else the user config directory ($XDG_CONFIG_HOME/openqa, or ~/.config/openqa), else /etc/openqa and /usr/etc/openqa — the first tier that yields any file wins outright, later tiers are not read. A ~/.config/openqa/client.conf override no longer merges with host sections that exist only in /etc/openqa/client.conf.
• $OPENQA_API_KEY/$OPENQA_API_SECRET are now honoured as a credential pair, taken ahead of client.conf.
• An openQA instance served under a path prefix (https://host/openqa) is now addressed and signed correctly — previously the prefix was silently dropped, yielding 403/404.
• A bare-authority --url-openqa localhost:9526 now infers http, not https.
• A credentialed openqa_instance URL has the userinfo dropped when resolving the request target, rather than merely redacted for display.

docs/src/configuration.md and the CHANGELOG.md [Unreleased] entry are updated to match.

Test hermeticity fix

ruoqa 0.2's new env-credential lookup meant a developer or CI shell exporting OPENQA_API_KEY/OPENQA_API_SECRET could silently override the credentials three existing tests assert on via client.conf fixtures. Added a save/clear/restore guard for both vars, under the existing #[serial(openqa_config_env)] convention, in:

• crates/mtui-datasources/tests/openqa.rs
• crates/mtui-core/src/commands/openqa_jobs.rs
• crates/mtui-datasources/src/openqa/client.rs

Each guarded test was observed failing with the vars exported and no guard, then passing with the guard added, with and without the vars set.

Testing

• cargo fmt --all --check
• cargo clippy --workspace --all-targets -- -D warnings
• RUSTDOCFLAGS="-D warnings" cargo doc --workspace --no-deps --all-features --document-private-items
• cargo test --workspace
• cargo test -p mtui-mcp -F mcp
• cargo build --workspace --no-default-features / --all-features
• cargo audit
• mdbook build docs
• cargo run -p mtui-cli -- --help / cargo run -p mtui-mcp --features mcp -- --help

[codecov]

Codecov Report

❌ Patch coverage is 87.87879% with 4 lines in your changes missing coverage. Please review.
✅ Project coverage is 96.28%. Comparing base (ff061cd) to head (022e830).

Files with missing lines	Patch %	Lines
crates/mtui-core/src/commands/openqa_jobs.rs	90.47%	2 Missing ⚠️
crates/mtui-datasources/src/openqa/client.rs	83.33%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #453      +/-   ##
==========================================
- Coverage   96.28%   96.28%   -0.01%     
==========================================
  Files         193      193              
  Lines       42907    42939      +32     
==========================================
+ Hits        41315    41343      +28     
- Misses       1592     1596       +4     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.