[mheffner]

Fixes GHSA-8ffr-xgwf-xj56 / CVE-2026-18140: uncontrolled recursion in the aws-smithy-json unknown-key skip path (affected <= 0.62.6). This is a Cargo.lock-only change; aws-smithy-json moves from 0.61.9 to 0.62.7, which requires moving the aws-config / aws-sdk-* crates to the first releases on aws-smithy-json 0.62 and the smithy crates they need.

• aws-config 1.8.6 -> 1.8.13
• aws-sdk-sso 1.89.0 -> 1.93.0
• aws-sdk-ssooidc 1.91.0 -> 1.95.0
• aws-sdk-sts 1.91.0 -> 1.97.0
• aws-runtime 1.5.17 -> 1.6.0
• aws-sigv4 1.3.7 -> 1.3.8
• aws-smithy-async 1.2.7 -> 1.2.14
• aws-smithy-http 0.62.6 -> 0.63.4
• aws-smithy-http-client 1.1.5 -> 1.1.10
• aws-smithy-json 0.61.9 -> 0.62.7
• aws-smithy-observability 0.1.5 -> 0.2.5
• aws-smithy-query 0.60.9 -> 0.60.14
• aws-smithy-runtime 1.9.5 -> 1.10.1
• aws-smithy-runtime-api 1.9.3 -> 1.12.3
• aws-smithy-types 1.3.5 -> 1.4.9
• aws-smithy-runtime-api-macros 1.0.0 (new)
• aws-smithy-schema 0.1.0 (new)
• tokio 1.47.1 -> 1.50.0, tokio-macros 2.5.0 -> 2.6.1 (aws-smithy-* require tokio ^1.49; io-uring dropped, windows-sys 0.61.2 added)
• tracing 0.1.41 -> 0.1.44, tracing-attributes 0.1.30 -> 0.1.31, tracing-core 0.1.34 -> 0.1.36 (aws-smithy-runtime-api requires tracing ^0.1.44)
• itoa 1.0.15 -> 1.0.18, ryu 1.0.20 -> 1.0.23 (aws-smithy-types requires itoa ^1.0.17, ryu ^1.0.22)

aws-smithy-json 0.62.7 and its new deps declare rust-version 1.91.1, matching rust-toolchain.toml; all selected versions build on 1.91.1.