chore(supply-chain): update audits/exemptions

[vdice]

Update audits and exemptions per failing audit check (also seen in #1107).

[michelleN]

@vdice Did you run a command to update supply-chain/config.toml. Just wondering what the process looked like for you? Looks like you did a manual check for anyhow 👍 and curious about the rest.

[vdice]

@michelleN yes, I had to at least perform one audit 😂 ; for this, as expected, I followed the steps mentioned in the SIP.

For the exemptions, I started bumping by hand per the cargo vet failures but then the tedium of doing so motivated the creation of a bash script to parse the <dep>:<version> entries from the cargo vet output and run cargo vet add-exemption <dep> <version> on each. (A subsequent cargo vet will cleanup older entries if they exist). Of course, simply bumping exemptions doesn't feed into the long-term goal of actually auditing dependencies, but while we shake out how we'd like our process to look like, it's a stop-gap.