fix(verisimdb): bump reqwest 0.12→0.13, add query feature for Dependabot quinn-proto alert

reqwest 0.13 splits query() into a separate feature flag. The quinn-proto
0.11.14 vulnerability (Dependabot) remains as a transitive build-time dep
of burn 0.20 via tracel-llvm-bundler — not in any production code path.
Documented in Cargo.toml notes, waiting for burn 0.21 stable.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: hyperpolymath