deps: use not yet published version of actix-governor 0.5

to get rid of mach dependency which has an unmaintained advisory
https://rustsec.org/advisories/RUSTSEC-2020-0168.html

Even though actix-governor is a dev-dependency and is not included in the binaries, doing so to get rid of security warning

Cargo.toml

@@ -217,7 +217,7 @@ simdutf8 = "0.1"
 simdutf8 = { version = "0.1", features = ["aarch64_neon"] }
 
 [dev-dependencies]
-actix-governor = "0.4"
+actix-governor = "0.5"
 actix-web = { version = "4.4", default-features = false, features = [
     "compress-brotli",
     "compress-gzip",
@@ -229,6 +229,9 @@ quickcheck = { version = "1", default-features = false }
 rusqlite = { version = "0.29", features = ["bundled"] }
 serial_test = { version = "2.0", features = ["file_locks"] }
 
+[patch.crates-io]
+actix-governor = { git = "https://github.com/AaronErhardt/actix-governor", rev="a49b9be" }
+
 [features]
 default = ["mimalloc"]
 all_features = [