Fix crypto hash update classification

[piaro]

Summary

• identify JavaScript and TypeScript bindings imported from node:crypto or crypto
• classify Hash.update() calls created by imported createHash as non-database method calls
• preserve database-write classification for unrelated update() calls
• verify that hash-only source files require no operation or data bindings

Testing

• cargo fmt --check
• cargo clippy --all-targets --locked -- -D warnings
• cargo test --locked
• sh scripts/tests/test-rust.sh