chore: update deny config

[DaniPopes]

Motivation

• Remove outdated exceptions and [[license.clarify]]
• Make config more strict for wildcard and git dependencies
  • bad practice, git dependencies are not allowed when published so doesn't hurt adding an extra check
• Add MPL-2.0 to license allow list since it generates a warning for being copy-left
  • Looked to other crates using the webpki-roots crate: https://github.com/hyperium/tonic/blob/master/deny.toml

The only remaining warnings are for duplicate crates

Solution

PR Checklist

• Added Tests
• Added Documentation
• Breaking changes

[mattsse]

right, we def don't need a matrix here if we use check all which does both

[DaniPopes]

A thing I noticed about this is that if check advisories fails with an error, it will continue regardless, but then if the next matrix step succeeds the entire job succeeds, silencing the advisory error..

[DaniPopes]

I initially took it from reth, should I update it there too?

[mattsse]

please do, ty!