Bump acton-ai past 0.35.0 to clear inherited RUSTSEC advisories

[rrrodzilla]

What

`cargo deny check advisories` (added in #43) currently carries seven
ignore entries, all rooted in the `libsql` dependency that `acton-ai`
0.35.0 pulls in transitively:

• RUSTSEC-2025-0141 — bincode unmaintained
• RUSTSEC-2025-0134 — rustls-pemfile unmaintained
• RUSTSEC-2026-0049 — rustls-webpki: CRL distribution point matching
• RUSTSEC-2026-0098 — rustls-webpki: URI name constraints accepted
• RUSTSEC-2026-0099 — rustls-webpki: wildcard name constraints accepted
• RUSTSEC-2026-0104 — rustls-webpki: reachable panic parsing a CRL
• RUSTSEC-2026-0258 — h2: unbounded empty DATA frames

None of these are reachable from `garrison-agent`'s or `garrison-hooks`'s
own code paths today (no CRL handling, no server-side h2 exposure), which is
why the scanner ignores them rather than blocking every push. They are still
real, and every one of them clears the moment `acton-ai` moves past its
current pin and `libsql` updates the stack underneath it.

Acceptance

• `acton-ai`'s exact-version pin in `agent/Cargo.toml` moves to a release
  whose `libsql` no longer resolves to the affected `bincode`,
  `rustls-pemfile`, `rustls-webpki`, or `h2` versions.
• The corresponding entries are removed from `deny.toml`'s
  `[advisories].ignore` list.
• `cargo deny check advisories` passes with an empty ignore list, or the
  list is re-justified against whatever remains.