Fix RUSTSEC-2026-0285: bump rustls to 0.23.45

CI's deny/audit jobs both failed on the pushed commit: rustls 0.23.44
(transitive via reqwest -> hyper-rustls, and separately via
chromiumoxide/chromiumoxide_fetcher for the Chrome downloader) had a
real TLS 1.3 handshake-boundary bug (GHSA-2mjx-qc3c-rqvc, the same
class as CVE-2025-61730). Not something to fix in our own code — just
an outdated lockfile entry. cargo update -p rustls to 0.23.45; cargo
deny check advisories and cargo audit are both clean locally.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: voidstackloop