update webpki

[webern]

What I'd like:

It looks like our webpki-roots-shim is incompatible with the next major version of webpki roots (0.22):

$ cargo build
   Compiling webpki-roots v0.22.2 (/home/mjb/repos/bottlerocket/sources/webpki-roots-shim)
error[E0432]: unresolved import `webpki::trust_anchor_util`
  --> webpki-roots-shim/src/lib.rs:10:13
   |
10 | use webpki::trust_anchor_util::cert_der_as_trust_anchor;
   |             ^^^^^^^^^^^^^^^^^ could not find `trust_anchor_util` in `webpki`

error[E0423]: expected function, tuple struct or tuple variant, found type alias `TLSServerTrustAnchors`
  --> webpki-roots-shim/src/lib.rs:17:9
   |
17 |         TLSServerTrustAnchors(&ROOTS)
   |         ^^^^^^^^^^^^^^^^^^^^^
   |
   = note: can't use a type alias as a constructor

warning: use of deprecated type alias `webpki::TLSServerTrustAnchors`: use TlsServerTrustAnchors
  --> webpki-roots-shim/src/lib.rs:11:14
   |
11 | use webpki::{TLSServerTrustAnchors, TrustAnchor};
   |              ^^^^^^^^^^^^^^^^^^^^^
   |
   = note: `#[warn(deprecated)]` on by default

warning: use of deprecated type alias `webpki::TLSServerTrustAnchors`: use TlsServerTrustAnchors
  --> webpki-roots-shim/src/lib.rs:14:38
   |
14 |     pub static ref TLS_SERVER_ROOTS: TLSServerTrustAnchors<'static> = {
   |                                      ^^^^^^^^^^^^^^^^^^^^^

Some errors have detailed explanations: E0423, E0432.
For more information about an error, try `rustc --explain E0423`.
warning: `webpki-roots` (lib) generated 2 warnings
error: could not compile `webpki-roots` due to 2 previous errors; 2 warnings emitted
FAIL: 101

Any alternatives you've considered: