fix: update tantivy 0.22→0.25, scraper 0.22→0.25, quinn-proto→0.11.14

Resolves cargo audit failures:
- RUSTSEC-2024-0384 (instant, unmaintained) — removed by tantivy upgrade
- RUSTSEC-2026-0037 (quinn-proto, DoS) — fixed by cargo update
- scraper advisory — resolved by version bump

Remaining warning: lru 0.12.5 (RUSTSEC-2026-0002) pinned by tantivy,
not a blocking error.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

compliance-dast/Cargo.toml

@@ -19,7 +19,7 @@ mongodb = { workspace = true }
 reqwest = { workspace = true }
 
 # HTML parsing
-scraper = "0.22"
+scraper = "0.25"
 
 # Browser automation
 chromiumoxide = { version = "0.7", features = ["tokio-runtime"], default-features = false }