fix(cast): use CSPRNG media path tokens and redact URIs in logs

Replace RandomState-based tokens with getrandom, avoid logging full
media base URLs, and redact /audio/<token>/… in DLNA info logs.

crates/qbz-cast/Cargo.toml

@@ -34,5 +34,8 @@ thiserror = "2"
 # Logging
 log = "0.4"
 
+# CSPRNG for cast media path tokens (not RandomState hash)
+getrandom = "0.2"
+
 # Async runtime (for DLNA)
 tokio = { version = "1", features = ["rt", "sync"] }