chore(deps): bump tinybus v0.3.6, tinytools v0.6.0, tinystoragedrivers v2.1.1 - #154

The diff only bumps pinned dependency versions and revision hashes (tinybus/tinybus-module to 0.3.6, tinytools and tinystoragedrivers git revs) in the root workspace manifest; no untrusted input paths, permissions, or CI configuration change, and version bumps are consistent across all tinystoragedrivers entries. One repository rule requires a comment above each dependency entry, which these edits leave intact rather than remove. Nothing reportable. 1 file was not security-reviewed: docs/specs/pure-vocabulary.md (prose or tabular data). _The code index is behind this pull request (indexed at `5f92b5f82f3a`), so retrieved context may be out of date._

No findings.