deps: bump github.com/pdfcpu/pdfcpu from 0.12.1 to 0.13.0

[dependabot]

Bumps github.com/pdfcpu/pdfcpu from 0.12.1 to 0.13.0.

Release notes

Sourced from github.com/pdfcpu/pdfcpu's releases.

v0.13.0

A Release Featuring CLI Pipelines and Safer Defaults

Starting with this release, pdfcpu improves CLI usability with broader stdin/stdout pipeline support and stricter overwrite handling.

Check out the refreshed documentation at https://pdfcpu.io

Many commands now support - for stdin/stdout, making pdfcpu easier to use in shell pipelines. Explicit output files and non-empty output directories are no longer overwritten implicitly. Use the new global --force flag when overwriting is intentional.

Example:

pdfcpu optimize - out.pdf < in.pdf

or:

cat in.pdf | pdfcpu optimize - - > out.pdf

or a pipeline:

aws s3 cp s3://acme-contracts/master.pdf - \
      | pdfcpu optimize - - \
      | aws s3 cp - s3://acme-contracts/optimized/master.pdf

---

CLI Improvements

This release adds and refines several user-facing CLI features:

• Broader stdin/stdout support using -
• Global --force flag for explicit overwrite handling
• annotations list --json
• form list --json
• certificates list --json
• merge --bookmark-mode wrap|preserve
• Improved version command behavior
• Clarified help text around signature validation scope and trust boundaries

The new overwrite behavior is intentionally stricter. Existing scripts that relied on implicit overwrites may need to add --force.

---

Merge Bookmarks

... (truncated)

Commits

• 198b38f bump version, fix #1410, #1411
• 3480a31 cleanup
• a212fad refactor cli cmd plumbing
• 982b418 clarify signature trust boundaries
• d27afe2 fix version cmd
• 80b99fe add certificate JSON listing and reset defaults
• 911aad9 upgrade dependencies
• a3225ab refactor parameter handling
• 4f4129e Add experimental Win7 build
• 84a68af decrease binary size via default build w/o bundled certificates, provide buil...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #22.