Recommended update for sequoia-sq

This update for sequoia-sq fixes the following issues:

Changes in sequoia-sq:

- Legal review Change main license to LGPL-2.0-or-later from GPL-2.0-only
* LICENSE.txt confirms it
* Correct Legal-Review-Notice usage

- Update dependencies due to security issues (CVE-2026-25541 bsc#1274437)

- Switch crypto backend from nettle to openssl (bsc#1257934)

- Update to version 1.4.0:
* Release v1.4.0.
* Update crossbeam-epoch.
* Enable optimizations when building rust-crypto crates.
* tool: canonicalize Ord and PartialOrd impls for Association
* tool: silence clippy error for potentially mutable Map key types
* tool: fix formatting to avoid leaking comments into doc strings
* clippy: allow two types with interior mutability for BTreeSet keys
* lib: avoid potentially panicking integer cast
* clippy: add default lint configuration
* Update NEWS.
* lib: Improve control char escaping
* tool: Fix output file's permissions.
* Gracefully deal with 404 HTTP result codes
* tool: Don't panic if write fails
* tool: Restrict file permissions on sensitive output
* Improve temporary file handling.
* Forward allow-* crypto features.
* Relax rusqlite dependency.
* tool: Add more cipher suites.
* tool: Add sq key generate --{encryption,signing}-algorithm.
* Update Cargo.lock.
* Relax subplot dependency.
* Relax roff dependency.
* Relax toml_edit dependency.
* Upgrade sequoia-wot.
* Relax indicatif dependency.
* Relax gethostname dependency.
* Relax dirs dependency.
* Relax clap_lex dependency.
* Update Cargo.lock.
* meta: Bump MSRV to 1.85.
* Update signing policy.

- Update vendored dependencies due to security and build issues

- Update to version 1.3.1:
* Release 1.3.1.
* Fix formatting.
* Improve documentation of `sq config`.
* Emit hints to mark an imported key as authenticated or introducer.
* Hedge against importing keys into the cert store.
* Improve displaying of preferred user IDs.
* Fix typo.
* Display backtraces attached to errors.
* tests: Avoid DSA key in tests as DSA will be rejected in the future.
* tests: Update PKI test vectors to not expire.
* Enable backtraces and tracing when running tests.
* Make importing Autocrypt certs more robust.
* Release 1.3.0.
* Make sq config get print to stdout.
* Fix early abort in sq keyring filter
* Fix test sq_verify_policy_as_of_relative_time
* Fix error message.
* Prefix matching for --...-self parameters fixed
* Fix examples.
* Port to sequoia-openpgp 2.
* ci: Always build the pages, but only publish when merging to main.
* Upgrade sequoia-man.
* Split out the man page generation into a new crate.
* Update openssl to address RUSTSEC-2025-0004.
* Update hickory-proto to address RUSTSEC-2025-0006.
* man: Fix NAME section for subcommands.

- Update to version 1.2.0:
* Release 1.2.0.
* Update Cargo.lock.
* Use authenticated identifiers in sq verify.
* Improve quoting.
* Improve sq download's output.
* Add a parameter to the authenticate function to control the output.
* Move helper function to common.
* Add a mechanism to replace an argument in a hint with a placeholder.
* Avoid crash parsing arguments to Strings.
* Make sq cert lint less quiet when there are no issues.
* Add sq key rotate.
* Extend replay to optionally take a signer.
* tests: Move utility function to the common module.
* Move function to the common module.
* Extend replay to allow the caller to limit what is replayed.
* Improve output.
* Allow the caller to specify an indentation level.
* Disable tracing.
* Fix test helper function.
* Add sq pki vouch replay.
* Move certification listing code to the common module.
* Move code in common to the sole function that uses it.
* Move the sq pki link list implement to its own module.
* Extend sq pki vouch list to list certifications of a certificate.
* Improve test.
* Simplify specifying certificate designators in tests.
* Require that certificate designators are authenticated.
* Use an explicit type for the trust amount parameter.
* Fix sq --cli-version.
* Improve sq pki link list's help text.
* Improve error messages.
* Avoid unnecessary lookups.
* Relax sq pki link list's certificate designators.
* Fix examples.
* Don't export non-exportable sigs and components when exporting keys.
* Add missing NEWS entry.
* Fix duplicating packets when dumping.
* Prevent monomorphization of Sq::resolve_cert.
* Prevent monomorphization of Sq::resolve_certs_filter.
* Add new command sq pki vouch list.
* Move the code for listing certification to common.
* Release 1.1.0.
* Relax subplot dependency.
* Relax rusqlite dependency.
* Update Cargo.lock.
* Fix output.
* Add a lint for uncertified user IDs.
* Show certificates without user IDs with --gossip.
* Improve sq cert list's documentation.
* Improve help text lints.
* Fix long help generation for cert designators.
* Update NEWS file.
* Add option --unusable to sq cert list, etc.
* Show hints about unusable bindings when --gossip is provided.
* Change how we refer to unusable bindings in sq cert list.
* Change sq cert list to not show warnings if --quiet is given.
* Distinguish unauthenticated and invalid bindings in sq cert list.
* Improve linting for sq cert list.
* Don't list revoke user IDs.
* Fix listing certificates by fingerprint or key ID.
* Remove duplicate code.
* Rework sq cert list's human readable output.
* Improve UserIDDesignator::argument_value.
* Fix UserIDDesignator::argument_value.
* Add some helper functions.
* tests: Add tests for sq cert list.
* Fix sq cert list --gossip.
* Fix output.
* Release 1.0.0.
* Fix NEWS.
* Align `sq download` with `sq verify`.
* Fix displaying preferred user IDs.
* Write to temporary file first, then persist it under the final name.
* Avoid using absolute paths in name of scratch files.
* Automatically