deps: bump vgi from 0.21.0 to 0.23.0

[dependabot]

Bumps vgi from 0.21.0 to 0.23.0.

Release notes

Sourced from vgi's releases.

v0.23.0

• vgi-rpc 0.15.0 -> 0.16.0, which fixes a request-body limit that never applied: axum's 2 MiB DefaultBodyLimit shadowed the configured RequestBodyLimitLayer, so any HTTP request body over 2 MiB got a 413 regardless of max_body_size. Rust was the only SDK rejecting realistic Arrow batches over HTTP.
• MSRV raised 1.90 -> 1.97, with the five clippy lints that the old pin hid fixed properly (filter_next x2 -> rfind, question_mark x2, explicit_counter_loop) and no #[allow]s added.
• ci(release): cut the GitHub Release automatically on tag push. This repo publishes on a tag, not on a published Release, so nothing ever created one -- 26 tags against 4 Releases, with GitHub advertising a version far behind crates.io.

Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com

v0.22.0

• deps: vgi-rpc 0.15.0. Client-authoritative HTTP codec negotiation, identity as a first-class accept token, VGI-Supported-Encodings always advertised, capability headers on compressed responses.
• behaviour: an --http worker now compresses its Arrow responses by default (vgi-rpc's response_compression_level moved from None to Some(1)); disable_response_compression() is the opt-out.
• ci: sha2's asm feature is enabled per-target (sha2-asm does not build under MSVC); the doc-examples vgi-rpc pin derives from the workspace.
• docs: quickstart dependency versions refreshed.

MSRV 1.90 unchanged. Both CI lanes green on all platforms.

Commits

• eb1483e Release 0.23.0
• e375c1c chore: raise MSRV from 1.90 to 1.97, fix the clippy lints it surfaces
• b07c3d1 release: bump 0.21.0 -> 0.22.0 — vgi-rpc 0.15 HTTP codec negotiation
• bca5d82 fix(ci): derive the doc-examples vgi-rpc pin from the workspace
• d74a1b2 build(deps): vgi-rpc 0.15.0 — client-authoritative HTTP codec negotiation
• 070b011 fix(ci): restore rustfmt + the Windows build after the sha2-asm fixtures
• 2f2e466 Add benchmark fixtures; enable sha2-asm + fast hex
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)