ci: pin cargo-deny to 0.17.0

The recent release of cargo-deny includes a dependency which has
breaking changes for parsing cargo metadata output.

Signed-off-by: Gavin Inglis <[email protected]>

Author: ginglis13

.github/workflows/rust.yml

@@ -15,7 +15,7 @@ jobs:
       labels: bottlerocket_ubuntu-latest_16-core
     steps:
       - uses: actions/checkout@v3
-      - run: cargo install cargo-deny --locked
+      - run: cargo install cargo-deny@0.17.0 --locked
       - run: cargo install cargo-make --locked
       - uses: actions/setup-go@v5
         with: