Co-authored-by: Stacky McStackface <95074132+stackable-bot@users.noreply.github.com>
Co-authored-by: Techassi <git@techassi.dev>

* fix: respect next link in uif entra backend requests

* fix: bound Entra group pagination, keep all memberships, add HTTP timeouts

Follow-ups to the @odata.nextLink pagination fix in #859:

- Add a 60s request / 15s connect timeout to every user-info-fetcher
  outbound HTTP backend (Keycloak, Entra, XFSC AAS) via a shared
  utils::http::client_builder(); reqwest otherwise waits indefinitely.
- Keep every directory membership by requesting /memberOf instead of
  restricting to microsoft.graph.group, so directory roles and
  administrative units are still returned.
- Cap @odata.nextLink following at 100 pages as a backstop against a
  cyclic or runaway link, warning if the group list may be truncated.
- Bump the yanked spin 0.9.8 to 0.9.9 (matching #857, which only landed
  on release-26.7) so cargo-deny passes, and regenerate Cargo.nix for
  the new wiremock dev-dependency.

* fix: address review feedback

- Restructure the Entra group pagination loop guard-first: check the page
  cap and warn/break before doing the request, per review.
- Reword the changelog entry for the pagination fix.

---------

Co-authored-by: maltesander <contact@maltesander.com>
Co-authored-by: Lars Francke <jujutsu@lars-francke.de>

Signed-off-by: Techassi <git@techassi.dev>
Co-authored-by: Nick <10092581+NickLarsenNZ@users.noreply.github.com>

Signed-off-by: Techassi <git@techassi.dev>