fix(ci): ignore RUSTSEC-2026-0104 (webpki CRL parsing panic)

Transitive dep via kube/rustls. We do not parse CRLs in our P2P/RPC stack.
Added to both deny.toml and check-audit.py ignore lists.

.gitlab/check-audit.py

@@ -20,7 +20,8 @@ IGNORE = {
     # tracing-subscriber 0.2.x: pulled by arkworks internals only
     "RUSTSEC-2025-0055",
     # rustls-webpki: transitive via kube-client, upgrade needs kube ecosystem bump
-    "RUSTSEC-2026-0098", "RUSTSEC-2026-0099",
+    # We do not use CRLs or rely on certificate name constraints in our P2P/RPC stack.
+    "RUSTSEC-2026-0098", "RUSTSEC-2026-0099", "RUSTSEC-2026-0104",
     # rand: unsound only with custom logger calling rand::rng() during init
     "RUSTSEC-2026-0097",
     # lru: Stacked Borrows in IterMut, no user-facing exploit path