chore(deps): update yanked spin versions (0.9.8->0.9.9, 0.10.0->0.10.1) (#183)

The spin maintainer yanked a range of versions (0.9.8 and 0.10.0 among them),
both of which were in our lockfile — 0.9.8 via heapless/postcard (cairn-vault)
and cranelift; 0.10.0 via the wasmtime/cranelift graph under --all-features. So
cargo-deny's `yanked = "deny"` failed on every PR (both the default and
--all-features deny checks). Bump each to its non-yanked patch (0.9.9, 0.10.1),
within the existing `^0.9`/`^0.10` requirements. Lockfile-only; no source change.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: zoza1982