chore(deps): Bump mongodb from 2 to 3

[xiangjinwu]

I hereby agree to the terms of the RisingWave Labs, Inc. Contributor License Agreement.

Highest Release Version: 2.3

What's changed and what's your intention?

Addresses the following:

• RUSTSEC-2024-0388: derivative is unmaintained; consider using an alternative #19326
• RUSTSEC-2024-0421: idna 0.2.3 accepts Punycode labels that do not produce any non-ASCII when decoded #19725

Dependabot fails to create the PR because tokio-runtime feature is not present in mongodb >= 3.

As shown by the Cargo.lock diff, this also helps us to drop a lot of old indirect dependencies in addition to derivative and idna.

Noticeable items in release notes from 2.8.2 to 3.2.3:

• v3.1.0: Added support for MongoDB 8.0 (released Oct 2024)
• v3.2.0: Upcoming v3.3.0 will drop support for MongoDB 4.0 (released Jun 2018 and reached EOL Apr 2022)

Checklist

• I have written necessary rustdoc comments.
• I have added necessary unit tests and integration tests.
• I have added test labels as necessary.
• I have added fuzzing tests or opened an issue to track them.
• My PR contains breaking changes.
• My PR changes performance-critical code, so I will run (micro) benchmarks and present the results.
• My PR contains critical fixes that are necessary to be merged into the latest release.

Documentation

• My PR needs documentation updates.

Release note

[xxchan]

great!