`tree-sitter-pkl` was removed from crates.io for malicious code

`tree-sitter-pkl` was part of a campaign that attempted to exfiltrate
environmental data from the host.

The malicious crate had 1 version published in March 2025, and had no evidence
of actual usage. This crate had no dependencies on crates.io.