IJPL-442: fix cargo deny vuln, do not use external info for license scanning

GitOrigin-RevId: 88394269437d4c774cd281a65ba1effe7b62de70

native/XPlatLauncher/Cargo.lock

@@ -2170,9 +2170,9 @@ dependencies = [
 
 [[package]]
 name = "mio"
-version = "0.8.8"
+version = "0.8.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "927a765cd3fc26206e66b296465fa9d3e5ab003e651c1b3c060e7956d96b19d2"
+checksum = "a4a650543ca06a924e8b371db273b2756685faae30f8487da1b56505a8f78b0c"
 dependencies = [
  "libc",
  "wasi",

native/XPlatLauncher/about.toml

@@ -11,3 +11,5 @@ private = { ignore = true }
 # build / dev dependencies are not shipped as part of the launcher
 ignore-build-dependencies = true
 ignore-dev-dependencies = true
+
+no-clearly-defined = true

native/XPlatLauncher/deny.toml

@@ -17,6 +17,7 @@ confidence-threshold = 0.95
 allow = [
     "MIT",
     "Apache-2.0",
+    "BSD-3-Clause", # reqwest -> encoding_rs
     "ISC", # libloading, MIT / Apache 2.0 alike
     "Unicode-DFS-2016" # serde -> [..] -> unicode-ident
 ]
@@ -37,9 +38,8 @@ allow = [ ]
 deny = [ ]
 skip = [ ]
 skip-tree = [
-    { name = "redox_users" },
-    { name = "redox_syscall" },
-    { name = "windows-sys", version = "0.45.0" }
+    { name = "reqwest" }, # build-time dependency
+    { name = "tar" }, # build-time dependency
 ]
 
 [sources]