Switch sqlx from ring to aws-lc-rs

[Aaron1011]

aws-lc-rs has post-quantum cryptography support,
while ring does not

---

Note

Medium Risk
Changes the TLS crypto backend used by database connections, which can affect runtime compatibility and security behavior. It also introduces new native build dependencies (aws-lc-sys via cmake), increasing CI/build and platform risk.

Overview
Updates sqlx to use the tls-rustls-aws-lc-rs feature instead of tls-rustls, effectively moving Rustls from ring to aws-lc-rs for TLS.

Cargo.lock is refreshed to add the new AWS-LC dependency chain (aws-lc-rs/aws-lc-sys plus build helpers like cmake, fs_extra, dunce, jobserver) and remove ring from the Rustls dependency set.

^{Reviewed by Cursor Bugbot for commit 8d23e70. Bugbot is set up for automated code reviews on this repo. Configure here.}

[shuyangli]

seems premature but yeah doesn't hurt