deps: cargo update (#3744)

## Description

`cargo update` to fix wasm-bindgen version incompatibilities between
Cargo.lock and CI to make wasm tests pass again.

This also adds an exception for [`rustls-pemfile` being
unmaintained](https://rustsec.org/advisories/RUSTSEC-2025-0134). We
should switch away from this, but let's not hold up unblocking things on
this. There's no immediate urge to upgrade, `rustls-pemfile` has no
known issues. The migration is simple in principle, but we have a few
deps still that use `rustls-pemfile`, so we can't just do it internally.
See #3746

Author: Frando