next-app-route release fixture: provider Cargo.lock still lists tokio; manifest asks for removed bundled-decimal feature #11404

Found during #11402. tests/release/packages/next-app-route/provider/Cargo.lock is a separate workspace that still lists tokio. It cannot be regenerated because its manifest requests a bundled-decimal feature that no longer exists (removed with the decimal.js binding). This was already broken on main.

Fix the provider manifest (drop bundled-decimal), then regenerate its lockfile and check that tokio is gone from it.