fix(deps): update dependencies and switch to naersk for nix builds (#42)

Fixes security vulnerabilities found by `cargo audit`:
- **RUSTSEC-2026-0104**: rustls-webpki reachable panic in CRL parsing
- **RUSTSEC-2026-0098**: rustls-webpki incorrect URI name constraints
- **RUSTSEC-2026-0099**: rustls-webpki wildcard name constraints
accepted
- **RUSTSEC-2026-0097**: rand unsoundness with custom logger

Also switches Nix build from `rustPlatform.buildRustPackage` to
`naersk.buildPackage` for Rust build caching.

Author: tembleking