Pass CARGO_DENY_VERSION from dependencies.yml to dependencies.sh

Good point! I think we can update the dependencies.sh to take another arg, and have dependencies.yml to pass the version in.

We can create a separate PR to address this

_Originally posted by @CTTY in https://github.com/apache/iceberg-rust/pull/2700#discussion_r3471500486_

Start by reading dependencies.yml and dependencies.sh to trace how dependency checks are invoked and how CARGO_DENY_VERSION is currently set. Update the argument flow so the version from dependencies.yml reaches dependencies.sh, then verify the script receives and uses the expected version.

Written by the indexing model from the issue text.