fix(deps): bump h2 to 0.4.16 for RUSTSEC-2026-0258 (#8613)