Use canonical xml crate directly

[enfipy]

Objective

• Depend directly on the canonical xml crate instead of the xml-rs compatibility wrapper.

Solution

• Replace the workspace and Android feature dependencies with xml.
• Regenerate Cargo.lock to remove the xml-rs 1.0 wrapper package.

Validation

• cargo fmt --all -- --check
• cargo check -p crossbundle-tools --no-default-features --features android
• Focused Android manifest reader and writer tests