[ameba23]

This bumps dependencies from the flashbots/attested-tls repo and updates for very minor api change. It also pins those dependencies to a specific commit (current head of main).

[Copilot]

🔵 Needs a closer look

The DCAP and cryptographic dependency upgrades require human validation because upstream code is unavailable and mocked tests do not establish real TDX/Azure attestation compatibility.

No open issues 🎉

What changed in this PR

Updates the attested TLS dependencies and pins them to commit ca2a75d3de428543947cf1272b425c5ca2c534d3, adapting local error handling to the upstream API change.

Changes:

• Pins attestation and pccs to the same upstream revision.
• Uses AttestedTlsError for report-input errors and adds tests for empty and malformed certificate chains.
• Refreshes the lockfile with updated transitive dependencies.

File	Description
crates/​attested-tls/​src/​lib.rs	Updates error types, adds X.509 parse-error conversion, and tests invalid certificate chains.
crates/​attested-tls/​Cargo.toml	Pins production and test attestation dependencies.
crates/​attested-tls-proxy/​Cargo.toml	Pins the pccs dependency.
Cargo.lock	Records pinned Git revisions and updated dependency versions.

_{Review effort: Balanced}