fix(deps): bump rustls and chacha20 in Cargo.lock

[vadim-anfv]

Fixes #318
Fixes #330

Clears two of the advisories cargo audit reports on master. Both are transitive, so only Cargo.lock changes:

• Crate chacha20 0.10.1 is yanked #318
• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries #330

cargo update -p chacha20@0.10.1
cargo update -p rustls@0.23.41 --precise 0.23.45

aws-lc-rs 1.17.1 -> 1.18.1, aws-lc-sys 0.42.0 -> 0.45.0 and rustls-webpki 0.103.13 -> 0.103.15 come along, because rustls 0.23.44 raised its requirements on them.

The three remaining advisories against rustls-webpki 0.101.7 are untouched, they are tracked in #308.

Checklists

All Submissions:

• I've signed all my commits
• I followed the contribution guidelines
• I ran cargo fmt and cargo clippy before committing

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 59.79%. Comparing base (1282553) to head (c90a592).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #341   +/-   ##
=======================================
  Coverage   59.79%   59.79%           
=======================================
  Files          22       22           
  Lines        3878     3878           
=======================================
  Hits         2319     2319           
  Misses       1559     1559           

Flag	Coverage Δ
rust	59.79% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[tvpeter]

ACK c90a592