chore(legal): regenerate THIRD-PARTY-NOTICES after the dependency fixes

The removed jsonwebtoken/rsa stack leaves the notices; updated crates
carry their new versions. tonic 0.14.9 puts MIT headers on its sources,
which cargo-about pasted in as ten license texts; about.toml now pins
tonic to its LICENSE file by checksum.

about.toml

@@ -43,3 +43,11 @@ targets = [
 # SPDX expression parsing cannot classify on its own.
 [ring]
 accepted = ["ISC", "MIT", "OpenSSL"]
+
+# tonic 0.14.9 sources carry MIT headers; take only LICENSE.
+[tonic.clarify]
+license = "MIT"
+
+[[tonic.clarify.files]]
+path = "LICENSE"
+checksum = "5c686e0f7978412b49187ae0e9f77e9b52eea9d8d2e6c0de8694b35817d873b1"