pluto: Add hyper-proxy as a module

[jpculp]

Description of changes:

The hyper_proxy module is a clone of tafia/hyper-proxy, but modified to take advantage of newer Rust dependencies.
Since Bottlerocket only uses 'rustls', other features and unused lines of code have been removed.

Also bumps webpki to 0.22.1.

Testing done:

Launched instance using an aws-k8s-1.25 AMI with user-data that includes the following:

[settings.network]
https-proxy = "<my-proxy>:9898"

Checked proxy server logs and found all traffic from my private IP being tunneled, including the EKS API calls for DescribeCluster:

1694211359.018    163 192.168.81.185 TCP_TUNNEL/200 9071 CONNECT eks.us-west-2.amazonaws.com:443 - HIER_DIRECT/35.164.66.95 -
1694211359.263    147 192.168.81.185 TCP_TUNNEL/200 9071 CONNECT eks.us-west-2.amazonaws.com:443 - HIER_DIRECT/35.164.66.95 -
1694211361.058    340 192.168.81.185 TCP_TUNNEL/200 20319 CONNECT api.ecr.us-west-2.amazonaws.com:443 - HIER_DIRECT/34.223.26.183 -
1694211361.070     77 192.168.81.185 TCP_TUNNEL/200 9528 CONNECT api.ecr.us-west-2.amazonaws.com:443 - HIER_DIRECT/34.223.26.183 -
1694211361.070     49 192.168.81.185 TCP_TUNNEL/200 7644 CONNECT api.ecr.us-west-2.amazonaws.com:443 - HIER_DIRECT/34.223.26.183 -

Checking CloudTrail, I can see that the DescribeCluster API call source IP is my proxy server:

    "eventTime": "2023-09-08T22:15:59Z",
    "eventSource": "eks.amazonaws.com",
    "eventName": "DescribeCluster",
    "awsRegion": "us-west-2",
    "sourceIPAddress": <my-proxy>,
    "userAgent": "aws-sdk-rust/0.55.3 os/linux lang/rust/1.71.1",

I set no-proxy for the EKS API endpoint and reboot like so:

apiclient set --json '{"settings":{"network":{"no-proxy":["eks.us-west-2.amazonaws.com"]}}}'
apiclient reboot

Then I can see that EKS API calls do not get proxied and the source IP is my actual instance's public IP:

    "eventTime": "2023-09-08T22:22:05Z",
    "eventSource": "eks.amazonaws.com",
    "eventName": "DescribeCluster",
    "awsRegion": "us-west-2",
    "sourceIPAddress": "54.212.110.209",
    "userAgent": "aws-sdk-rust/0.55.3 os/linux lang/rust/1.71.1",

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

[jpculp]

I've included a temp commit to make it easier to see what changed in the hyper-proxy code, which I plan to squash prior to merge.

[jpculp]

In its current state --no-default-features or setting the feature to rustls-base (which you shouldn't), results in compilation errors. Since we only ever plan on using rustls, we can simply remove the conditional compilation blocks. Does anyone have any opinions on that?

[jpculp]

Removed extraneous (to Bottlerocket) features and re-tested.

[jpculp]

Rather than adding hyper-proxy to sources, we'll just add it as a module for pluto.

[webern]

Makes sense to me.

[jpculp]

Re-based, re-tested, and ready for review.