fix(cargo): remove transitive dependency on tokio

Cargo.lock

@@ -238,12 +238,6 @@ dependencies = [
  "autocfg",
 ]
 
-[[package]]
-name = "pin-project-lite"
-version = "0.2.16"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
-
 [[package]]
 name = "png"
 version = "0.18.0"
@@ -364,7 +358,6 @@ dependencies = [
  "bytes",
  "hex",
  "sha2",
- "tokio",
 ]
 
 [[package]]
@@ -383,16 +376,6 @@ dependencies = [
  "unicode-ident",
 ]
 
-[[package]]
-name = "tokio"
-version = "1.48.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff360e02eab121e0bc37a2d3b4d4dc622e6eda3a8e5253d5435ecf5bd4c68408"
-dependencies = [
- "bytes",
- "pin-project-lite",
-]
-
 [[package]]
 name = "toml"
 version = "0.9.8"

Cargo.toml

@@ -11,7 +11,6 @@ edition = "2024"
 anyhow = "1.0.100"
 toml = "0.9.8"
 log = "0.4.28"
-sha256 = "1.6.0"
 
 [dependencies.image]
 version = "0.25.8"
@@ -23,6 +22,10 @@ optional = true
 version = "1.0.228"
 features = ["derive"]
 
+[dependencies.sha256]
+version = "1.6.0"
+default-features = false
+
 [dependencies.uefi]
 version = "0.36.0"
 features = ["alloc", "logger"]