chore(deps): remove legacy rustls webpki path

[elezar]

Summary

Switch AWS SDK crates to default-https-client so the dependency graph no longer enables the legacy Hyper 0.14 / rustls 0.21 TLS stack. This removes the vulnerable rustls-webpki 0.101.7 instance flagged by Dependabot alert 6.

Related Issue

No public issue: addresses GitHub Dependabot security alert 6 (rustls-webpki GHSA-82j2-j2ch-gfr8).

Changes

• Replace AWS SDK rustls feature usage with default-https-client.
• Regenerate Cargo.lock, removing legacy hyper-rustls 0.24.2, rustls 0.21.12, tokio-rustls 0.24.1, sct, and rustls-webpki 0.101.7.

Testing

• mise run pre-commit passes
• dev-openshell shell mise run pre-commit attempted; failed in existing helm:lint because chart metadata is missing postgresql
• /home/elezar/.cargo/bin/cargo check -p openshell-server
• /home/elezar/.cargo/bin/cargo tree -i rustls-webpki@0.101.7 no longer finds the package
• Unit tests added/updated
• E2E tests added/updated (if applicable)

Checklist

• 关注s Conventional 提交
• 提交 are signed off (DCO)

[github-actions]

Label test:e2e applied for a795360. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.