add RSA rustsec warning to ignores, we don't use that dependency

[syphar]

fixes #2346 Interestingly there is no issue created.

Also I don't seem to find the reason why cargo audit warns here,

Crate:     rsa
Version:   0.9.4
Title:     Marvin Attack: potential key recovery through timing sidechannels
Date:      2023-11-22
ID:        RUSTSEC-2023-0071
URL:       https://rustsec.org/advisories/RUSTSEC-2023-0071
Severity:  7.4 (high)
Solution:  No fixed upgrade is available!
Dependency tree:
rsa 0.9.4
└── sqlx-mysql 0.7.2
    ├── sqlx-macros-core 0.7.2
    │   └── sqlx-macros 0.7.2
    │       └── sqlx 0.7.2
    │           └── docs-rs 0.6.0
    └── sqlx 0.7.2

( while th mysql feature is not active from our side)

[GuillaumeGomez]

Maybe it only checks for all features enabled by default?

[syphar]

I tried cargo tree -i rsa --target all --all-features and the output was empty.

[Nemo157]

cargo audit checks the lockfile, which lists all dependencies that might be activated if you activate (transitive) dependencies features, it doesn't limit itself to checking just the dependencies which are used.

[Nemo157]

rustsec/rustsec#681 seems to have the most relevant discussion