Repair CI dependencies and pinned test fixtures

[0x00101010]

Why

CI fails on a rustls advisory, mismatched test dependencies, unavailable verifier services, and timing-dependent assertions. Repair the fixtures and synchronization without disabling checks.

What

• Update rustls to 0.23.45.
• Install the pinned forge-std revision with matching lock metadata.
• Synchronize recursive submodules after selecting an external fixture revision.
• Use a local verifier response and correct the unlabeled-address JSON expectation.
• Wait for fee-history cache readiness and make zero-time-adjustment assertions independent of wall-clock seconds.

Notes

• Code, review assistance, and PR prose were generated with Amp.

[0x00101010]

CI and CodeQL are green at 48a3e17ac. Local verification passed 1,333/1,333 CI-selected workspace tests with zero retries, plus nightly all-target/all-feature Clippy, formatting, and cargo-deny. Six independent review lenses covered the initial repair; correctness, simplicity, and idiomacy reviewed the timing follow-up. All findings are resolved.

External fixtures still depend on public archive RPC when HTTP_ARCHIVE_URLS is unset. Identical fixtures on other branches encountered 429/-32097 errors and timeouts; this PR does not eliminate that infrastructure dependency or disable those tests.

Comment generated by Amp.