fix(ci): use crates.io paserk dependency instead of local path

The CI was failing because paserk was referenced via a local path
(../paserk) that doesn't exist in the GitHub Actions environment.

- Update paserk dependency to version 0.4.0 from crates.io
- Add #[allow(deprecated)] for K1 re-export to maintain backward
  compatibility while acknowledging RUSTSEC-2023-0071

Author: rrrodzilla

Cargo.toml

@@ -77,7 +77,7 @@ zeroize = { version = "1.4", features = ["zeroize_derive"] }
 time = { version = "0.3", features = ["parsing", "formatting"] }
 rand_core = "0.9"
 digest = "0.10"
-paserk = { version = "0.1.0", path = "../paserk", optional = true }
+paserk = { version = "0.4.0", optional = true }
 
 [lints.rust]
 unsafe_code = "forbid"

src/paserk.rs

@@ -37,6 +37,9 @@ pub use paserk::core::types::{
     PaserkLocal, PaserkLocalId, PaserkLocalPw, PaserkLocalWrap, PaserkPublic, PaserkPublicId,
     PaserkSeal, PaserkSecret, PaserkSecretId, PaserkSecretPw, PaserkSecretWrap,
 };
+// K1 is deprecated due to RUSTSEC-2023-0071 (Marvin Attack on RSA) but re-exported
+// for users who need backward compatibility with v1_public_insecure tokens.
+#[allow(deprecated)]
 pub use paserk::core::version::{K1, K2, K3, K4, PaserkVersion};
 
 // Re-export Argon2 params when using V2 or V4 (which support Argon2)