Get `cargo deny check` clean

[Porges]

Updated dependencies to remove those with security advisories:

• hyper and http → major bump to 1.0
• reqwest → major bump to 0.12

Also updated dev-dep env_logger, which doesn't have downstream effects.

[Porges]

@dmolokanov please take a look