[EngSys] Regular updates to dependencies in cgmanifest.json

Look for rust crates in cgmanifest.json, look for later semver-compatible versions, open PR to upgrade dependency version in the tooling.

Fail if there's a non-ignored major version change to a crate so engineering can take a look at changes and handle the upgrade.

Some kind of basic validation should be in place here... maybe have the `rust - pullrequest` pipeline run the core tests?