Narrow zip to the deflate codec by default

[rtb-12]

zip = "8.0" picks up zip's default feature set, which enables every compression codec it supports: bzip2, deflate64, lzma, ppmd, zstd, xz, plus aes-crypto. That is ~19 transitive crates compiled into every downstream consumer, for codecs cached-path never selects itself - extraction just calls ZipArchive::extract and decodes whatever the archive contains.

This narrows the default to deflate (with time kept for entry timestamps), and adds a zip-all-codecs feature that restores zip's full default set for consumers who extract archives using the other codecs. That mirrors how tar.xz/lzma support is already opt-in through the existing lzma feature.

Motivation beyond build weight: bzip2 0.6 resolves to libbz2-rs-sys, which carries the bzip2-1.0.6 license. Downstream projects with license allowlists (cargo-deny) now hit that via cached-path -> zip -> bzip2 even though no bzip2 code path is reachable for them.

For a consumer whose archives are all deflate zips or tar.gz, this removes the bzip2/zstd/xz/ppmd/aes stacks from the graph entirely. cargo test passes with the narrowed features, including test_extract_zip.

Note: for a consumer that does extract bzip2/zstd/xz zips today, this default change means enabling zip-all-codecs (or the specific zip feature) when upgrading - flagging it in case you prefer that called out in the changelog as a breaking change for 0.11.

[epwalsh]

hi @rtb-12, this LGTM but I do think it's worth noting in the changelog. If you can update that I'll get this merged and released.

[rtb-12]

Thanks changelog added under Unreleased, and I dropped the explanatory comment from Cargo.toml since the entry now carries that context.