fix(deps): bump lru to 0.18.2 to patch RUSTSEC-2026-0253

Advisory: https://rustsec.org/advisories/RUSTSEC-2026-0253.html
Severity: INFO (unsound / memory-corruption class, CWE-416/415)
Fixed in: 0.18.2

Lockfile-only change (ecc2/Cargo.lock); no manifest or source changes.

ecc2/Cargo.lock

@@ -1231,9 +1231,9 @@ checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
 
 [[package]]
 name = "lru"
-version = "0.18.0"
+version = "0.18.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a860605968fce16869fd239cf4237a82f3ac470723415db603b0e8b6c8d4fb9"
+checksum = "5d2f2f9b4ba7e6b24d95e7e899329d35be83bcded72c8540cdd5368932d1d90a"
 dependencies = [
  "hashbrown 0.17.1",
 ]