feat(engine): configure cargo-deny and remove unused bincode dep (#726, #636)

deny.toml: license allowlist + RUSTSEC advisory checking. econ-sim excluded
from graph (path dep, no license). Bincode v1 removed — never imported in
source, RUSTSEC-2025-0141 advisory resolved by deletion.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

server/Cargo.lock

@@ -325,15 +325,6 @@ dependencies = [
  "thread_local",
 ]
 
-[[package]]
-name = "bincode"
-version = "1.3.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b1f45e9417d87227c7a56d22e471c6206462cba514c7590c09aff4cf6d1ddcad"
-dependencies = [
- "serde",
-]
-
 [[package]]
 name = "bitflags"
 version = "2.10.0"
@@ -1303,12 +1294,11 @@ dependencies = [
 
 [[package]]
 name = "settled-reach-server"
-version = "0.1.34"
+version = "0.1.35"
 dependencies = [
  "bevy_app",
  "bevy_ecs",
  "bevy_tasks",
- "bincode",
  "clap",
  "crossbeam-channel",
  "econ-sim",