build(deps): update Rust deps for security fixes

[kvinwang]

Summary

Rust workspace deps (Cargo.toml + Cargo.lock)

• Update bytes 1.10.1 -> 1.11.1 (RUSTSEC-2025-0014)
• Update time 0.3.39 -> 0.3.47 (RUSTSEC-2025-0015)
• Update aws-lc-sys 0.37.0 -> 0.38.0 (RUSTSEC-2025-0013, via cargo update)
• Run cargo update to pick up latest compatible versions of all transitive deps

key-provider-build

• Switch from kvinwang fork to upstream MoeMahhouk/gramine-sealing-key-provider (commit 180ff46)
  • The fork was only needed for dcap-qvl 0.3.10 fix, now merged upstream
  • Upstream also upgraded Gramine v1.5 -> v1.9, Rust toolchain -> 1.85, hardened attestation
• Regenerated Cargo.lock to fix bytes vulnerability

Not addressed

• mio 0.7.14 (CVE-2024-27308): Windows-only named pipe issue, dismissed (does not affect this Linux project). Pinned via luks2 -> crossterm 0.19.
• elliptic npm: no fix available

Supersedes #493 and #494.