cargo audit fails on main: RUSTSEC-2026-0382 in rustls-webpki 0.103.15 #282

Seen on PR #279's audit run (advisory published 2026-10-20, unrelated to that PR). Bump rustls-webpki to the patched release (cargo update -p rustls-webpki), check cargo tree -i rustls-webpki for pins (tlsio/objio/aws-sdk), run tests (tls pinning/CA validation suites), and confirm the audit workflow is green.