build(rust): drop unused direct dependencies and centralize pins

Remove tokio from spotiflac-extensions and thiserror and the direct hyper
entry from spotiflac-network (hyper stays resolved through hyper-util).
Move roxmltree, rusqlite and libc into workspace.dependencies. libc already
resolves to 0.2.190, so the workspace pin uses that exact version. No
resolved version or enabled feature changes.

rust_backend/Cargo.lock

@@ -2514,7 +2514,6 @@ dependencies = [
  "tempfile",
  "thiserror",
  "time",
- "tokio",
  "zeroize",
  "zip",
 ]
@@ -2557,7 +2556,6 @@ dependencies = [
  "hickory-proto",
  "http",
  "http-body-util",
- "hyper",
  "hyper-rustls",
  "hyper-util",
  "rustls",
@@ -2566,7 +2564,6 @@ dependencies = [
  "rustls-platform-verifier",
  "serde",
  "serde_json",
- "thiserror",
  "tokio",
  "tokio-util",
  "tower-service",

rust_backend/Cargo.toml

@@ -40,7 +40,6 @@ serde_json = { version = "1.0", features = ["float_roundtrip", "raw_value"] }
 thiserror = "2.0"
 uniffi = { version = "=0.32.2", default-features = false }
 tokio = { version = "=1.53.2", features = ["rt-multi-thread", "net", "time", "sync", "io-util", "macros"] }
-hyper = { version = "=1.12.0", features = ["client", "http1", "http2"] }
 hyper-util = { version = "=0.1.21", features = ["client-legacy", "http1", "http2", "tokio"] }
 hyper-rustls = { version = "=0.27.10", default-features = false, features = ["http1", "http2", "ring", "tls12"] }
 rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
@@ -72,6 +71,9 @@ tz-rs = "=0.7.3"
 httpdate = "=1.0.3"
 cap-std = "=4.0.3"
 rustix = { version = "=1.1.5", features = ["fs"] }
+roxmltree = "=0.21.1"
+rusqlite = { version = "=0.40.2", features = ["bundled", "modern_sqlite", "hooks"] }
+libc = "=0.2.190"
 
 [workspace.lints.rust]
 unsafe_code = "deny"

rust_backend/crates/core/Cargo.toml

@@ -17,7 +17,7 @@ unicode-general-category.workspace = true
 chrono.workspace = true
 rustix.workspace = true
 claxon.workspace = true
-roxmltree = "=0.21.1"
+roxmltree.workspace = true
 
 [target.'cfg(not(any(target_os = "android", target_os = "ios")))'.dependencies]
 tz-rs.workspace = true

rust_backend/crates/extensions/Cargo.toml

@@ -10,7 +10,6 @@ publish.workspace = true
 spotiflac-core.workspace = true
 spotiflac-network.workspace = true
 spotiflac-providers.workspace = true
-tokio.workspace = true
 rquickjs.workspace = true
 serde.workspace = true
 serde_json.workspace = true
@@ -35,7 +34,7 @@ cap-std.workspace = true
 rustix.workspace = true
 
 [dev-dependencies]
-libc = "=0.2.190"
+libc.workspace = true
 rustls.workspace = true
 rcgen = { version = "=0.14.10", default-features = false, features = ["crypto", "ring", "pem"] }
 

rust_backend/crates/mobile/Cargo.toml

@@ -27,12 +27,12 @@ url.workspace = true
 chrono.workspace = true
 regex.workspace = true
 zip.workspace = true
-roxmltree = "=0.21.1"
-rusqlite = { version = "=0.40.2", features = ["bundled", "modern_sqlite", "hooks"] }
+roxmltree.workspace = true
+rusqlite.workspace = true
 
 [target.'cfg(target_os = "android")'.dependencies]
 libusb1-sys = { version = "=0.7.0", features = ["vendored"] }
-libc = "0.2"
+libc.workspace = true
 
 [lints]
 workspace = true

rust_backend/crates/network/Cargo.toml

@@ -8,7 +8,6 @@ publish.workspace = true
 
 [dependencies]
 tokio.workspace = true
-hyper.workspace = true
 hyper-util.workspace = true
 hyper-rustls.workspace = true
 rustls.workspace = true
@@ -24,7 +23,6 @@ hickory-proto.workspace = true
 cookie.workspace = true
 url.workspace = true
 serde.workspace = true
-thiserror.workspace = true
 
 [dev-dependencies]
 serde_json.workspace = true