fix(deps): update rustls to 0.23.45

[jsgrrchg]

Update the root workspace lockfile from rustls 0.23.37 to 0.23.45, the patched release for GHSA-2mjx-qc3c-rqvc. This replaces the incomplete 0.23.43 update proposed in closed PR #516 and addresses Dependabot alert #141.

Cargo also updates the required aws-lc-rs, aws-lc-sys, and rustls-webpki dependencies and normalizes existing Windows dependency references. The separate vendored Codex lockfile already resolves rustls 0.23.45.

Validation:

• cargo clippy --workspace --all-targets --locked -- -D warnings passed.
• cargo test --workspace --locked passed.
• cargo tree --locked -i rustls confirms the native backend's reqwest paths use 0.23.45.
• An isolated in-memory TLS 1.3 probe confirmed rejection of plaintext EncryptedExtensions, plaintext KeyUpdate, and partial handshake messages appended to ServerHello, while a legitimate handshake completed successfully.
• git diff --check passed.

Local validation ran on Linux; Windows and macOS validation remains with CI.