Depend on url/serde with no default features

[DanGould]

IDNA is huge ball of complexity that some of our targets, namely Block applications, don't want to depend on. This isn't a full #1124 removal but it's a one line change that gets rid of the biggest offenders.

I probably need to update the lock files too. nope, it works.

Pull Request Checklist

Please confirm the following before requesting review:

• I have disclosed my use of
  AI
  in the body of this PR. (none)
• I have read CONTRIBUTING.md and rebased my branch to produce hygienic commits.

[coveralls]

Pull Request Test Coverage Report for Build 18140675050

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 84.647%

---

Totals
Change from base Build 18138517774:	0.0%
Covered Lines:	8601
Relevant Lines:	10161

---

💛 - Coveralls

[DanGould]

@benalleng Looks like we still have the url/idna dependency from bhttp. Doesn't need to block this but should be related to #1124 as a first step

`cargo tree`

payjoin v0.24.0 (/Users/dan/f/dev/payjoin/payjoin)
├── bhttp v0.6.1
│   ├── thiserror v1.0.63
│   │   └── thiserror-impl v1.0.63 (proc-macro)
│   │       ├── proc-macro2 v1.0.101
│   │       │   └── unicode-ident v1.0.12
│   │       ├── quote v1.0.40
│   │       │   └── proc-macro2 v1.0.101 (*)
│   │       └── syn v2.0.106
│   │           ├── proc-macro2 v1.0.101 (*)
│   │           ├── quote v1.0.40 (*)
│   │           └── unicode-ident v1.0.12
│   └── url v2.5.7
│       ├── form_urlencoded v1.2.2
│       │   └── percent-encoding v2.3.2
│       ├── idna v1.1.0

[benalleng]

Hmm odd that it is in our tree even though we don't have the http feature enabled for bhttp.

I think this is coming from dep:http in the payjoin _core feature

[benalleng]

Ack on 502b6ee one more step to getting rid of it entirely

[DanGould]

I think this is coming from dep:http in the payjoin _core feature

it's from bhttp if you look at the cargo tree summary

[benalleng]

Yeah but its enabled through that dep:http I think as bhttp does not have url as a default dependency