Fix -Zdirect-minimal-versions build by updating url and once-cell

...or rather, updating the direct requirement specs for those two.
This has no effect on what we build within the libsignal workspace;
the lockfile already uses more recent versions. The versions chosen
are the minimum required by our other recently-bumped dependencies.

Author: jrose-signal

Cargo.toml

@@ -160,7 +160,7 @@ minidump-unwind = { version = "0.22.1", default-features = false }
 mp4san = "0.5.3"
 neon = { version = "1.1.0", default-features = false }
 nonzero_ext = "0.3.0"
-once_cell = "1.19.0"
+once_cell = "1.20.0"
 partial-default = "0.1.0"
 paste = "1.0.15"
 pin-project = "1.1.5"
@@ -212,7 +212,7 @@ tonic-prost-build = "0.14"
 tower-service = "0.3.3"
 tungstenite = "0.28.0"
 unicode-segmentation = "1.12.0"
-url = "2.4.1"
+url = "2.5.4"
 uuid = "1.5"
 visibility = "0.1.1"
 warp = "0.4.2"