Add cargo deny and bump deps now that MSRV is 1.64 (#2724)

Since we are on MSRV 1.64 we can bump some deps.

Also add [cargo-deny](https://github.com/EmbarkStudios/cargo-deny) for
verifying
- licenses
- duplicate dependencies (multiple versions)
- security advisories

Not enforcing it yet because there is a lot to clean 😅