fix: use fixed version of bao-tree

to avoid short reads causing a panic in blake3 hazmat API

Author: rklaehn

Cargo.lock

@@ -15,7 +15,7 @@ rust-version = "1.81"
 [dependencies]
 anyhow = { version = "1" }
 async-channel = "2.3.1"
-bao-tree = { version = "0.15", features = [
+bao-tree = { version = "0.15.1", features = [
     "tokio_fsm",
     "validate",
 ], default-features = false }