cabal: bump vaultaire version and vaultaire-common bound