Update cuid implementation to use cuid2 to improve security

[Vashiru]

This is a pull request for the changes I mention in #3826. Consider this a start for updating the cuid implementation to cuid2. I've made the changes as described in #3826 and updated the lockfile using Cargo build.

I am not a Rust developer, so this might very well be incomplete or incorrect and somebody else will have to take it from here. But I hope to kickstart the implementation of this by making this pull request.

[CLAassistant]

All committers have signed the CLA.

[tomhoule]

requesting changes to block accidental merges, we have to come to a conclusion in the prisma/prisma issue first.

[SevInf]

Hi @Vashiru.
Thank you for submitting the contribution, but I don't think we can merge it.

We can't just silently replace cuid1 with 2 - it will be a breaking change for a lot of our users.
One of the big reasons for that: cuid1 being monotonically increasing was one of it's advertised features before it was declared insecure my maintainers. So, it is very likely that there is a lot of code out there, relying one this property.

For example:

prisma.user.findMany({
  id: { gt: lastId }
})

it is expected that all records this code returns would created after lastId was. Transparently replacing cuid1 with cuid2 will break that.

Proper way forward was would be to deprecate, but keep cuid() psl function and add a separate cuid2() function.

I am going to close this PR now. Feel free to submit a new one, with non-breaking implementation of the feature.