fix(deps): rustls 0.23.45 (RUSTSEC-2026-0285)

[piekstra]

rustls < 0.23.45 accepted TLS 1.3 handshake messages across encryption-level
boundaries (RUSTSEC-2026-0285 / GHSA-2mjx-qc3c-rqvc, published 2026-09-14).
This repo's CI does not run cargo-audit, but the built binary carries the
vulnerable TLS stack. Lockfile-only bump (rustls + rustls-webpki); no manifest change.

[piekstra-dev]

Automated PR Review

Reviewed commit: c1aaaffce099
Profile: reviewer - Posting as: piekstra-dev

Summary

Reviewer	Findings
rust:implementation-tests	0
security:code-auditor	0

Reviewer Coverage

• rust:implementation-tests — complete (broad); skipped: none; constraints: This agent reviews Rust implementation quality and test coverage; the diff is a lockfile-only dependency version bump with no manifest or source changes, so no implementation or test findings apply.
• security:code-auditor — complete (broad); skipped: none; constraints: none

0 PR discussion threads considered. 0 summarized; 0 resolved.

---

Completed in 41s | ~$0.48 (est.) | claude-sonnet-5 | cr 0.10.289

Field	Value
Model	claude-sonnet-5
Reviewers	rust:implementation-tests, security:code-auditor
Engine	claude_cli · claude-sonnet-5
Reviewed by	cr · piekstra-dev
Duration	41s wall · 57s compute
Cost	~$0.48 (est.)
Tokens	28 in / 3.1k out

Per-workstream usage

• orchestrator-selection — claude-sonnet-5
  • In: 6
  • Out: 711
  • Cache read: 73.5k
  • Cache create: 22.9k
  • Cost: ~$0.12 (est.)
  • Duration: 11s
• rust:implementation-tests — claude-sonnet-5
  • In: 8
  • Out: 1.1k
  • Cache read: 126.7k
  • Cache create: 22.6k
  • Cost: ~$0.14 (est.)
  • Duration: 18s
• security:code-auditor — claude-sonnet-5
  • In: 8
  • Out: 947
  • Cache read: 128.3k
  • Cache create: 23.4k
  • Cost: ~$0.14 (est.)
  • Duration: 18s
• orchestrator-rollup — claude-sonnet-5
  • In: 6
  • Out: 383
  • Cache read: 99.1k
  • Cache create: 11.6k
  • Cost: ~$0.08 (est.)
  • Duration: 8s