Upgrade tungstenite, webpki-roots, and hyper-rustls dependencies. (#37333)

This change upgrades some dependencies that required some manual
intervention due to duplicate packages and breaking API changes. These
changes also allow us to upgrade to ipc-channel 0.20
(https://github.com/servo/ipc-channel/pull/390#discussion_r2070677101),
and allow us to upgrade other dependencies that have migrated to rand
0.9 while the ecosystem remains split.

Testing: Existing WPT tests.

Signed-off-by: Josh Matthews <josh@joshmatthews.net>

deny.toml

@@ -71,14 +71,17 @@ allow = []
 # List of crates to deny:
 deny = [
     "num",
-    { crate = "rand", wrappers = [
-        "ipc-channel",
-        "phf_generator",
-        "quickcheck",
-        "servo_rand",
-        "tracing-perfetto",
-        "tungstenite",
-    ] },
+    # cargo-deny does not allow denying the rand crate while also skipping
+    # it for duplicate checks. While the ecosystem is split between 0.8 and 0.9,
+    # we need to prioritize allowing duplicate versions.
+    #{ crate = "rand", wrappers = [
+    #    "ipc-channel",
+    #    "phf_generator",
+    #    "quickcheck",
+    #    "servo_rand",
+    #    "tracing-perfetto",
+    #    "tungstenite",
+    #] },
 ]
 
 # List of crates to skip for the duplicate check:
@@ -160,6 +163,14 @@ skip = [
     "objc2-app-kit",
     "objc2-foundation",
     "objc2",
+
+    # duplicated by tungstenite
+    "getrandom",
+    "rand",
+    "rand_chacha",
+    "rand_core",
+    "wasi",
+    "webpki-roots",
 ]
 
 # github.com organizations to allow git sources for