build(deps): pin patched transitive dependency versions (#406)

Remediate remaining lockfile-resolvable alerts by pinning patched transitives in sdks and updating Rust lockfile crates.

Updated: flatted@^3 -> 3.4.2, minimatch@^3 -> 3.1.5, minimatch@^5 -> 5.1.8, minimatch@^9 -> 9.0.7, aws-lc-rs -> 1.16.2, aws-lc-sys -> 0.39.0, rustls-webpki@0.103.10.

Remaining unpatchable alert: bigint-buffer (#31), advisory reports no patched version (first_patched_version: none / patched_versions: <0.0.0).

Co-authored-by: Jo D <dev-jodee@users.noreply.github.com>

Author: dev-jodee

Cargo.lock

@@ -16,7 +16,11 @@
       "brace-expansion@^2": "2.0.3",
       "picomatch@^2": "2.3.2",
       "picomatch@^4": "4.0.4",
-      "yaml@^2": "2.8.3"
+      "yaml@^2": "2.8.3",
+      "flatted@^3": "3.4.2",
+      "minimatch@^3": "3.1.5",
+      "minimatch@^5": "5.1.8",
+      "minimatch@^9": "9.0.7"
     }
   }
 }