fix(security): patch rustls across daemon and platform SDK

[benfavre]

The daemon workspace and independently locked Rust platform SDK used rustls 0.23.43, affected by RUSTSEC-2026-0285. Pin and lock patched rustls 0.23.45 in both dependency graphs, without adding advisory exemptions.

Validation exposed an existing mobile contract test race: two parallel tests rebuilt the same emitted JavaScript while importing it. A separate test-only commit builds the SDK once before either reader starts, preserving both live HTTP contracts and their assertions.

Validation:

• Full locked Rust workspace/all-targets suite passes (test process file-descriptor limit raised from 1024 to 65536).
• Workspace/all-targets Clippy passes with warnings denied; formatting and licence boundary checks pass.
• cargo deny passes advisories, bans, licences and sources.
• Independently locked Rust SDK: 34 tests pass.
• TLS/network connector suites: 539 tests pass.

The first broad run exhausted the default test-process descriptor budget; after raising it, the parallel SDK build race was reproduced and fixed. The final full suite passes.

Production deployment has not been performed. Companion desktop patch: benfavre/shelldeck#176.