fix(ci): admit audited rust-skia licenses

deny.toml

@@ -15,7 +15,9 @@ allow = [
     "Apache-2.0 WITH LLVM-exception",
     "BSD-2-Clause",
     "BSD-3-Clause",
+    "CC0-1.0",
     "ISC",
+    "IJG",
     "MIT",
     "Unicode-3.0",
     "Zlib",
@@ -39,7 +41,6 @@ allow = []
 allow-workspace = true
 deny = []
 skip = [
-    { crate = "bit-vec@0.8.0", reason = "Approved pinned skia-rs shader parser compatibility line" },
     { crate = "bitflags@1.3.2", reason = "Approved pinned pure-Rust PNG compatibility line" },
     { crate = "block-buffer@0.10.4", reason = "Approved RustCrypto digest 0.10 compatibility line" },
     { crate = "cfg_aliases@0.1.1", reason = "Approved older nix build-helper line" },
@@ -52,6 +53,7 @@ skip = [
     { crate = "hashbrown@0.16.1", reason = "Approved pinned skia-rs geometry compatibility line" },
     { crate = "nix@0.28.0", reason = "Approved machine-address Unix compatibility line" },
     { crate = "nom@7.1.3", reason = "Approved Skia bindgen parser compatibility line" },
+    { crate = "rand@0.9.5", reason = "Approved WebRTC protocol line alongside skia-rs geometry's rand 0.10" },
     { crate = "rand_core@0.6.4", reason = "Approved elliptic-curve random compatibility line" },
     { crate = "rand_core@0.9.5", reason = "Approved rand 0.9 compatibility line" },
     { crate = "rustc-hash@1.1.0", reason = "Approved pinned skia-rs shader parser compatibility line" },