This includes:

* Cargo 17133: [stable] Bump patch version to 0.97.2
* Cargo 17131: [1.96] backport: Add global HTTP timeout tracking to http_async
* Cargo 17046: [1.96] Bump cargo-util-schemas to 0.14.0 and cargo to 0.97.1
* Cargo 17134: [stable 1.96 backport] Backport portable-atomics to 1.96 branch

This includes:

* Cargo 17140: [stable 1.96.0] Patch libssh2-sys
  - CVE-2025-15661: sftp_symlink out of bounds read on malformed packet
  - CVE-2026-55199: check _libssh2_get_string() return in EXT_INFO handler
  - CVE-2026-55200: bounds check for packet_length in REQUIRES_FULL_PACKET path

Co-authored-by: Mark Rousskov <mark.simulacrum@gmail.com>

[stable] 1.96.1 release



This prepares 1.96.1 release with:

- [Cargo: fix timeout/retry behavior](rust-lang/cargo#17131)
- [rustc: fix unsoundness in MIR opt](#158214)

Currently targeting this Thursday.

r? me