sources: update tough to 0.23.0

[sky1122]

Description of changes:
update tough to v0.23.0

Testing done:

[root@admin]# apiclient get os
{
  "os": {
    "arch": "x86_64",
    "build_id": "49f1c7d2",
    "pretty_name": "Bottlerocket OS 1.62.0 (aws-k8s-1.33)",
    "variant_id": "aws-k8s-1.33",
    "version_id": "1.62.0"
  }
}
[root@admin]# apiclient update check
21:20:16 [INFO] Refreshing updates...
Failed to check for updates: refresh attempt failed with status 'Failed' (-1): Metadata error: Failed to verify root metadata: Signature threshold of 1 not met for role root (0 valid signatures)

[root@admin]# [ssm-user@control]$ journalctl -u updog

[root@admin]# apiclient get os
{
  "os": {
    "arch": "x86_64",
    "build_id": "d5b82aef-dirty",
    "pretty_name": "Bottlerocket OS 1.63.0 (aws-k8s-1.33)",
    "variant_id": "aws-k8s-1.33",
    "version_id": "1.63.0"
  }
}
[root@admin]#

TBD more for updating reqwest to 0.13

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

[sky1122]

force pushed to fix license