Add `deny.toml` with a few exceptions, and update certain dependencies to get rid of duplicates. Running `cargo deny check` will yield some warnings still, but no errors.