chore: reduce duplicate or unused cargo deps

[codefromthecrypt]

Summary

This reduces the amount of duplicate versions in cargo. I started looking at this noticing we are skewed again on rmcp.

Type of Change

• Build / Release

AI Assistance

• This PR was created or reviewed with AI assistance

Testing

ran tests

Related Issues

raised agentclientprotocol/symposium-acp#117 to get rid of the multiple rmcp versions

[Copilot]

Pull request overview

This PR consolidates and deduplicates Cargo dependencies across the workspace, and updates some tests to use the shared env-lock test utility instead of temp-env. The goal is to reduce version skew (especially around rmcp and HTTP-related crates) and clean up unused dev-dependencies.

Changes:

• Switched several crates (goose, goose-server, goose-mcp, goose-cli, goose-acp) to use workspace-wide versions of reqwest, tower(-http), url, base64, and testing crates like test-case, reducing duplicate versions.
• Removed unused dev-dependencies such as temp-env, criterion, agent-client-protocol-schema, and others, with corresponding Cargo.lock cleanup.
• Updated Config tests in crates/goose/src/config/base.rs to use env_lock::lock_env instead of temp_env::with_vars for environment isolation.

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
crates/goose/src/config/base.rs	Replaced temp_env::with_vars with env_lock::lock_env in three secret-related tests to use the workspace-standard env locking utility.
crates/goose/Cargo.toml	Pointed reqwest, base64, and url to workspace dependencies and removed unused dev-deps (agent-client-protocol-schema, criterion, temp-env), keeping feature sets unchanged.
crates/goose-server/Cargo.toml	Switched tower-http, base64, reqwest, and url to workspace-managed versions; simplified dev-dependencies by reusing workspace tower and env-lock.
crates/goose-mcp/Cargo.toml	Standardized url, base64, and reqwest to workspace versions; removed unused optional utoipa dependency and some unused dev-deps.
crates/goose-cli/Cargo.toml	Moved base64 and tower-http to workspace versions and dropped unused dev-deps (temp-env, test-case, serial_test) from this crate.
crates/goose-acp/Cargo.toml	Switched url to the workspace version, moved test-case to the workspace dev-dependency, and removed tower-http dev-dep that is no longer used.
Cargo.toml	Added workspace-wide entries for test-case, base64, reqwest, tower, tower-http, and url to centralize versions.
Cargo.lock	Regenerated to reflect dependency deduplication and removals (e.g., criterion, temp-env, older rustls-native-certs, extra sysinfo, and older tower-http), and to align all consumers with the new unified versions.