Update Rust bridge Cargo dependencies

[tconley1428]

Refresh the Rust bridge lockfile to the latest versions allowed by the existing Cargo dependency requirements. This includes rustls 0.23.42 → 0.23.45 and ringbuf 0.5.1 → 0.5.2, addressing the advisories reported in #1929, along with compatible updates to PyO3, Tokio, Futures, AWS-LC, and the remaining transitive dependencies.

Keep the Cargo manifests and SDK Core revision unchanged. matchit remains at 0.8.4 because Axum pins it exactly; cargo update --dry-run --verbose reports no remaining compatible updates. Add a security changelog entry for the advisory fixes.

Fixes #1929.

Validation on macOS ARM64 with Rust 1.95 and Python 3.14:

• poe bridge-lint
• cargo clippy --locked --no-default-features --features fips -- -D warnings
• poe build-develop
• poe lint
• cargo fmt --check and git diff --check
• FIPS dependency graph selects aws-lc-fips-sys and excludes ring.
• poe test -n 4 -s tests/bridge tests/test_runtime.py tests/test_tls.py tests/test_envconfig.py tests/test_converter.py tests/worker/test_replayer.py tests/test_client.py tests/worker/test_workflow.py tests/worker/test_activity.py: 448 passed, 1 skipped.