Upgrade rustls past RUSTSEC-2026-0285 and move off the yanked der 0.8.0
and wnaf 0.14.0 releases, matching staging.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JxCuyquXN2nF1b1bRZmRNy