build: Exempt aho-corasick 1.1.4

It seems like everyone just decides to trust or exempt this crate. There
are a few "safe-to-run" audits but no one really commits to an audit
certifying "safe-to-deploy". I'm not content with this, but I definitely
need way more time if I'm going to actually audit the whole thing. So
for now, an exemption is preferred over "trusting" since it keeps the
audit in my backlog.

Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>

Author: hashcatHitman

supply-chain/config.toml

@@ -13,6 +13,10 @@ url = "https://raw.githubusercontent.com/hashcatHitman/supply-chain/main/audits.
 [imports.mozilla]
 url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml"
 
+[[exemptions.aho-corasick]]
+version = "1.1.4"
+criteria = "safe-to-deploy"
+
 [[exemptions.memchr]]
 version = "2.7.6"
 criteria = "safe-to-deploy"