fix(deny): ignore RUSTSEC-2026-0253

[iamquang95]

Ignore this info rustsec: https://rustsec.org/advisories/RUSTSEC-2026-0253.html

cargo deny check fails on RUSTSEC-2026-0253 (lru 0.16.4, unsound): LruCache::pop() frees the node before dropping the key, so a panicking key Drop skips detach() and leaves a dangling pointer.

Can't be fixed by upgrading or narrowing features: lru is a non-optional dep of alloy-provider with ungated call sites, alloy-provider is load-bearing (crates/eth1wrap/src/lib.rs:107 issues the ERC-1271 eth_call behind operator-signature verification), and every published alloy-provider through 2.3.0 pins lru = "^0.16" while the fix is only in >= 0.18.2 — so no cargo update, no alloy 2.x bump, no [patch.crates-io].

Not reachable either: only a panicking key Drop skips the detach (the value is moved out, never dropped there), and alloy keys its caches on BlockNumber (u64) and B256, neither of which implements Drop.

[iamquang95]

Close because of #636