Bump Taffy to 6a36efbe (Taffy #1242 merged)

[nicoburns]

Summary

Re-pins taffy (Cargo.toml + Cargo.lock) to 6a36efbe, the commit on Taffy main that merged DioxusLabs/taffy#1242. No Blitz code changes.

That PR is a block layout fix: for height: stretch on an in-flow child of a block container, each vertical margin is treated as zero if it could collapse through the matching edge of the containing block (no border/padding on that side, and the containing block does not establish a new BFC). Otherwise it is subtracted as before.

css-sizing/stretch/block-height-008 gains 40 subtests and loses 40. It has 80 children in vertical-writing-mode containers, each checked twice (the second time with direction: rtl):

Container	Child with height: stretch	Child with width: stretch
vertical-rl / vertical-lr	pass before and after (40)	gained (40)
sideways-rl / sideways-lr	lost (40)	fail before and after (40)

So the vertical-* half now passes fully and all losses are in the sideways-* half. sideways-* writing modes are not supported yet (waiting on Stylo support).

cssom-view/scroll-back-to-initial-position is listed as newly failing here but not on #1156 or #1157, which include the same Taffy change.

The remaining block-height-011 failures have the stretched block inside an inline <span>.

Link to Devin session: https://dioxus.staging.devinenterprise.com/sessions/3a06d93089f2434ba3519a7813dea1e8
Open in Devin Desktop: https://dioxus.staging.devinenterprise.com/desktop/session/3a06d93089f2434ba3519a7813dea1e8?variant=devin-insiders
Requested by: @nicoburns

[staging-devin-ai-integration]

I'll fix CI failures and address comments from users with write access that start with 'Devin'.

• Disable automatic comment, CI, and merge conflict monitoring