deps(deps): bump the tls-stack group across 1 directory with 2 updates

Bumps the tls-stack group with 2 updates in the / directory: [rustls](https://github.com/rustls/rustls) and [webpki-roots](https://github.com/rustls/webpki-roots).


Updates `rustls` from 0.23.36 to 0.23.40
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.36...v/0.23.40)

Updates `webpki-roots` from 0.26.11 to 1.0.6
- [Release notes](https://github.com/rustls/webpki-roots/releases)
- [Commits](rustls/webpki-roots@v/0.26.11...v/1.0.6)

---
updated-dependencies:
- dependency-name: rustls
  dependency-version: 0.23.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tls-stack
- dependency-name: webpki-roots
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: tls-stack
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

Cargo.lock

@@ -41,7 +41,7 @@ reqwest-eventsource = "0.6"
 # rustls dangerous_configuration: required to install a custom verifier on
 # top of WebPkiServerVerifier (chain validation) + SPKI pin check.
 rustls = { version = "0.23", default-features = false, features = ["ring", "logging", "std", "tls12"] }
-webpki-roots = "0.26"
+webpki-roots = "1.0"
 # subtle: constant-time SPKI pin compare. Already in dep tree via bcrypt /
 # ed25519-dalek / curve25519-dalek — zero new transitives.
 subtle = "2"