Bump rustls-webpki to 0.103.13 to fix GHSA-82j2-j2ch-gfr8 and GHSA-965h-392x-2mh5

Updates rustls-webpki from 0.103.3 to 0.103.13 to pick up upstream
security fixes:

- GHSA-82j2-j2ch-gfr8: reachable panic in CRL parsing (0.103.13)
- GHSA-965h-392x-2mh5: URI name constraints (0.103.12)
- GHSA-xgp8-3hg3-c2mh: DNS wildcard name constraint (0.103.12)
- GHSA-pwjx-qhcg-rvj4: CRL Distribution Point selection (0.103.10)

Re-authors the dependabot PR #1702 so CI runs with secret access.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: zlav