Update tokio to 1.54.1 and ctutils to 0.4.4 for RUSTSEC-2026-0384 and RUSTSEC-2026-0385 #1174

The dependency audit on #1173 fails on two advisories published on 2026-10-21 and 2026-10-23, after main's last CI run:

• RUSTSEC-2026-0384: race condition in tokio::time::Interval on tokio 1.54.0, patched in 1.54.1.
• RUSTSEC-2026-0385: non-constant-time mask generation and u128 comparisons in ctutils 0.4.3 (pulled in by hmac 0.13 and sha2 0.11 through digest 0.11), patched in 0.4.4.

Both are patch releases, so cargo update -p tokio -p ctutils in src-tauri/Cargo.lock should clear the audit. Needed before the v1.0.0 release (#1172).