build(deps): bump haraka-plugin-spf in the production-dependencies group

Bumps the production-dependencies group with 1 update: [haraka-plugin-spf](https://github.com/haraka/haraka-plugin-spf).


Updates `haraka-plugin-spf` from 1.2.7 to 1.2.8
- [Release notes](https://github.com/haraka/haraka-plugin-spf/releases)
- [Changelog](https://github.com/haraka/haraka-plugin-spf/blob/master/CHANGELOG.md)
- [Commits](https://github.com/haraka/haraka-plugin-spf/commits)

---
updated-dependencies:
- dependency-name: haraka-plugin-spf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

package.json

@@ -72,7 +72,7 @@
     "haraka-plugin-recipient-routes": "^1.2.0",
     "haraka-plugin-rspamd": "^1.3.1",
     "haraka-plugin-spamassassin": "^1.0.0",
-    "haraka-plugin-spf": "1.2.7",
+    "haraka-plugin-spf": "1.2.8",
     "haraka-plugin-syslog": "^1.0.6",
     "haraka-plugin-uribl": "^1.0.8",
     "haraka-plugin-watch": "^2.0.4",