feat: add cargo deny

[TommyCpp]

related to #557

• Add CI pipeline to check Rust security advisory.
• Fix the security advisory in the repo.

[codecov]

Codecov Report

Merging #604 (9c76fd6) into main (f07cc56) will decrease coverage by 0.3%.
The diff coverage is 8.2%.

@@           Coverage Diff           @@
##            main    #604     +/-   ##
=======================================
- Coverage   55.0%   54.7%   -0.4%     
=======================================
  Files        100     101      +1     
  Lines       8889    8945     +56     
=======================================
+ Hits        4896    4897      +1     
- Misses      3993    4048     +55     

Impacted Files	Coverage Δ
opentelemetry-jaeger/src/exporter/agent.rs	0.0% <0.0%> (ø)
opentelemetry-jaeger/src/exporter/runtime.rs	0.0% <0.0%> (ø)
opentelemetry-jaeger/src/lib.rs	92.1% <ø> (ø)
opentelemetry-jaeger/src/exporter/mod.rs	47.4% <17.3%> (-0.4%)	⬇️
opentelemetry-jaeger/src/exporter/uploader.rs	26.0% <23.0%> (-16.8%)	⬇️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ae4aeb3...9c76fd6. Read the comment docs.

[djc]

I'd prefer having a minimal config with only the options that are non-default.

[djc]

Instead of this, I usually set publish = false in Cargo.toml and then enable ignoring private crates in deny.toml. But maybe it's useful to explicitly license the examples in this case?

[TommyCpp]

I guess that depends on the policy of opentelemetry org. But we should add publish = false regardless

[TommyCpp]

close #557