Update dependency org.asynchttpclient:async-http-client to v2.15.0 [SECURITY] (main) - #12

This gate applies only to PRs opened by an R2 agent bot (r2-remote-agents-stag[bot], r2-remote-agents[bot]) — based on who opened the PR, not how the code was written. This PR was opened under a developer account, so it does not apply and no approvals are required. PRs you open yourself are never gated, even if you used AI tools locally.