fix(deps): bump rand from 0.8.5 to 0.10.1

[keelerm84]

Summary

Bumps the rand dependency from 0.8.5 to 0.10.1 to address a customer-reported security concern with the older version.

The only usage of rand is in retry.rs for jitter calculation during backoff. The rand 0.10 API changes required updating:

• thread_rng() → rand::rng()
• gen_range() (via Rng trait) → random_range() (via RngExt trait)

The range semantics (current_delay / 2..=current_delay) are unchanged.

Review & Testing Checklist for Human

• Verify the rand::RngExt trait import and rand::rng().random_range(...) call are idiomatic for rand 0.10
• Confirm the updated dependency resolves the specific security concern from the reported issue
• Check CI passes — all 59 unit tests passed locally

Notes

This is a major version bump (0.8 → 0.10), but the API surface used by this crate is minimal (single call site), so the migration is straightforward.

Link to Devin session: https://app.devin.ai/sessions/6f753c80cc4d4afabef3354af1b1eeb6
Requested by: @keelerm84

---

Note

Low Risk
Low risk: a dependency bump with a single call-site update for jitter generation; behavior should remain the same aside from potential RNG implementation differences.

Overview
Updates the rand dependency from 0.8.5 to 0.10.1.

Adjusts retry backoff jitter generation in retry.rs to the new rand API by switching to RngExt and replacing thread_rng().gen_range(...) with rand::rng().random_range(...) while keeping the jitter range semantics unchanged.

^{Reviewed by Cursor Bugbot for commit b6cb839. Bugbot is set up for automated code reviews on this repo. Configure here.}

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[devin-ai-integration]

@cursor review