chore(deps): bump rustls to 0.23.45 for RUSTSEC-2026-0285 (LAB-4038)

[27Bslash6]

Summary

• Bump rustls 0.23.37 → 0.23.45 (and transitively rustls-webpki 0.103.13 → 0.103.15) to fix RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries.
• rustls is a transitive dependency (via reqwest → hyper-rustls / tokio-rustls); no manifest changes needed, Cargo.lock only.

Test plan

• cargo update -p rustls — scoped update, 4-line Cargo.lock diff
• cargo deny check advisories — advisories ok
• cargo audit — zero error[vulnerability], only the three pre-existing unsound warnings (anyhow, rand, scc)
• cargo check --workspace — builds clean

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• Cargo.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Repository: cachekit-io/cachekit-rs/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Team

Run ID: 4e4e254c-e6ee-4968-a52d-bb8dcd22e147

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}