Declare hmac, sha2 and subtle at the workspace root

crates/server takes all three with workspace = true for the Stripe
webhook signature check, but the root manifest never defined them, so a
clean checkout did not resolve. They were already in the tree through
argon2; this only names them.

1 files changed, 3 insertions, 0 deletions

diff --git a/Cargo.lock b/Cargo.lock
index 914002c..0cc0e5d 100755
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -7578,11 +7578,14 @@ dependencies = [
  "dashmap",
  "dotenvy",
  "futures-util",
+ "hmac",
  "rand 0.8.8",
  "reqwest",
  "serde",
  "serde_json",
+ "sha2",
  "sqlx",
+ "subtle",
  "thiserror 1.0.69",
  "time",
  "tokio",