Bump rustls-webpki to 0.103.13 to fix GHSA-82j2-j2ch-gfr8 and GHSA-965h-392x-2mh5

[zlav]

Overview

Bumps the rustls-webpki Rust crate from 0.103.3 to 0.103.13 to resolve security vulnerabilities reported upstream by the rustls project.

Re-authors Dependabot PR #1702 so CI can run with repository secrets (the dependabot run failed dependency-scan, Linux-arm-build, and integration-test because Dependabot PRs are denied access to FOSSA_API_KEY and GITHUB_TOKEN).

Acceptance criteria

rustls-webpki resolves to 0.103.13 in Cargo.lock and the Rust workspace continues to build.

Testing plan

1. cargo check --release passes with the updated dependency (verified locally).
2. CI build and dependency-scan jobs pass.

Risks

Minimal — patch version bump of an indirect dependency with no API changes on our side. Cargo.toml is unchanged; only Cargo.lock moves. The change also re-resolves five unrelated windows-sys transitive entries from 0.52.0 to 0.59.0 as a side-effect of running cargo update.

Metrics

N/A

References

• Dependabot PR #1702 (being replaced)
• GHSA-82j2-j2ch-gfr8 — reachable panic in CRL parsing (fixed in 0.103.13)
• GHSA-965h-392x-2mh5 — URI name constraints (fixed in 0.103.12)
• GHSA-xgp8-3hg3-c2mh — DNS wildcard name constraint (fixed in 0.103.12)
• GHSA-pwjx-qhcg-rvj4 — CRL Distribution Point selection (fixed in 0.103.10)
• rustls-webpki 0.103.3 → 0.103.13 changelog

Checklist

• I added tests for this PR's change (or explained in the PR description why tests don't make sense).
  • No tests needed — this is a dependency version bump with no code changes.
• If this PR introduced a user-visible change, I added documentation into docs/.
  • N/A — no user-visible change.
• If this PR added docs, I added links as appropriate to the user manual's ToC in docs/README.ms and gave consideration to how discoverable or not my documentation is.
  • N/A
• If this change is externally visible, I updated Changelog.md. If this PR did not mark a release, I added my changes into an ## Unreleased section at the top.
  • N/A — internal dependency update only.
• If I made changes to .fossa.yml or fossa-deps.{json,yml}, I updated docs/references/files/*.schema.json AND I have updated example files used by fossa init command.
  • N/A
• If I made changes to a subcommand's options, I updated docs/references/subcommands/<subcommand>.md.
  • N/A