Update edgezero to chunked-config GC rev and wire ts config gc

[aram356]

Summary

Adopts the new commands from stackpop/edgezero#314 (Fastly chunked-config GC): the edgezero dependency pins move from tag v0.0.4 to the PR's branch, and the ts CLI gains the new config gc subcommand.

Note: edgezero#314 is still open, so the pins track its branch spec/fastly-chunk-gc (lockfile currently resolves to 0873ec5a). Once it merges and a release is tagged, the pins should move to that tag.

Changes

File	Change
Cargo.toml, Cargo.lock	edgezero pins: tag = "v0.0.4" → branch = "spec/fastly-chunk-gc"
crates/trusted-server-cli/src/run.rs	Wire ts config gc (ConfigGcArgs → edgezero_cli::run_config_gc) following the updated upstream CLI template, plus parse tests
crates/trusted-server-core/src/config.rs	Adapt to the AppConfigMeta trait change: SECRET_FIELDS const replaced by a secret_fields() method (still empty for Trusted Server)
.gitignore	Ignore .*.edgezero-lock, the new local config-push advisory-lock sidecar written next to fastly.toml

config gc is untyped (it inspects the store's physical entries, not the typed app config), dry-run by default, and deletes only with --yes plus an explicit --older-than window. config push now also garbage-collects the superseded chunk generation on re-push (cloud and --local), so re-pushing a changed trusted-server.toml no longer leaks the prior generation of chunk entries.

Test plan

All run against the branch head 0873ec5a:

• ./scripts/test-cli.sh — all pass, including new config gc parse tests
• ts config gc --help smoke test (parses and renders upstream arg docs)
• cargo check-fastly / check-axum / check-cloudflare / check-spin
• cargo test-fastly (2000+ tests) / test-axum / test-cloudflare / test-spin
• cargo clippy-fastly / -axum / -cloudflare / -cloudflare-wasm / -spin-native / -spin-wasm — clean
• cargo fmt --all -- --check — clean
• Parity integration tests — 13 passed