citool: update rust crates

[xtqqczze]

No description provided.

[Mark-Simulacrum]

Can you look for and adjust usage of citool in CI to actually pass --locked? I don't think we do that today in at least some places (https://triage.rust-lang.org/gha-logs/rust-lang/rust/95227692674?pr=161197#L2026-08-16T21:12:18.8117107Z), which means we're not necessarily using the committed lockfile.

It's technically a separate change but I think it makes sense to apply here if we're bumping dependencies. I assume you cut this as just general housekeeping rather than for a particular intended dependency bump?

[xtqqczze]

My intention was to bump cc following its recent update, but I noticed it made sense to bump all the dependencies instead. The --locked flag makes sense too.

[rustbot]

r? @Mark-Simulacrum

rustbot has assigned @Mark-Simulacrum.
They will have a look at your PR within the next two weeks and either review your PR or reassign to another reviewer.

Use r? to explicitly pick a reviewer

Why was this reviewer chosen?

The reviewer was selected based on:

• Owners of files modified in this PR: infra-ci
• infra-ci expanded to 6 candidates
• Random selection from Mark-Simulacrum, jdno, jieyouxu, marcoieni, ubiratansoares