chore(deps): cargo update — patch rustls-webpki + transitive bumps

cargo update only — no Cargo.toml constraint changes. Closes the
HIGH-severity Dependabot alert on rustls-webpki (DoS via panic on
malformed CRL BIT STRING) by bumping the in-range copy:

  rustls-webpki 0.103.8 → 0.103.13
  rustls 0.23.38 → 0.23.39
  rustls-pki-types 1.14.0 → 1.14.1
  + minor transitives

Verified: cargo check --lib clean; cargo test --lib 637/637 pass, 2
ignored.

Note: full Dependabot resolution would require reqwest 0.11 → 0.12
(echidnabot, blocked by transitive constraint) and similar for time,
bytes, jsonwebtoken, rand. Tracked separately.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath