Relax the mlua dependency pin, and instead specify the minimum allowed version