fix(security): fix 5 security issues in zerocopy-derive, jsonptr, opentelemetry-http and 1 more

[aikido-autofix]

---

Changes

Upgrade zerocopy-derive, jsonptr, opentelemetry-http, and rand to fix memory safety violations, DoS crashes, and unbounded memory allocation vulnerabilities.

Fixes #(issue)

Testing

Proof it works

✅ 5 CVEs resolved by this upgrade

This PR will resolve the following CVEs:

Issue	Severity	Description
AIKIDO-2026-381234	MEDIUM	[zerocopy-derive] Macros fail to recognize raw identifier syntax in #[repr(...)] attributes, causing incorrect trait implementations that allow unsafe memory operations on misaligned or invalid data, leading to undefined behavior.
AIKIDO-2026-57390	MEDIUM	[jsonptr] A panic vulnerability in the delete module allows remote attackers to cause denial of service by crafting JSON Pointers with the - token or an index equal to array length, crashing applications that process untrusted input like JSON Patch operations.
AIKIDO-2026-849361	MEDIUM	[opentelemetry-http] Unbounded memory allocation from HTTP response bodies without size limits enables denial-of-service attacks through oversized responses or stalled connections that hang clients indefinitely.
AIKIDO-2026-875754	LOW	[rand] Deserialization of UniformChar bypasses validation, allowing an invalid Unicode range to be loaded. This can cause undefined behavior and memory safety violations when sampling from the corrupted distribution.
GHSA-cq8v-f236-94qc	LOW	[rand] The rand library is unsound when log and thread_rng features are enabled with a custom logger accessing rand::rng() during reseeding, causing aliased mutable references through unsafe code that violates Stacked Borrows rules, resulting in undefined behavior.

🔗 Related Tasks

• https://linear.app/elastiflow/issue/SEC-1168/aikido-fix-5-security-issues-in-zerocopy-derive-jsonptr-opentelemetry

---