fix(deps): bump anyhow to 1.0.103 (RUSTSEC-2026-0190)

[gortavoher]

Security advisory: RUSTSEC-2026-0190

anyhow 1.0.102 (in Cargo.lock) has an Error::downcast_mut() unsoundness — RUSTSEC-2026-0190 (published 2026-06-25). It fails cargo audit -D warnings (the toolkit security job), so CI will go red on the next run.

Fix

cargo update -p anyhow --precise 1.0.103

1.0.103 is the patched release. Then run the full pre-PR checks (fmt, clippy, test, audit, msrv) and open a fix(deps): PR.

Tracking issue — pick up next time this repo is in focus. (Renovate may also raise the bump independently.)