Upgraded to rust 1.99.1 and more importantly, a debian runtime that has the cert revocations. Switched to trixie while I was at it, which meant libssl3t64 instead of libssl3.
Also pinned the SHAs cause it's nice, but can remove that if there's a preference.
It runs fine!