deps: cargo cooldown update

Add a trivial little script to run `cargo cooldown update`.
The purpose of the script is to make it a little more discoverable
in the future if I or someone else forgets how this works.

https://crates.io/crates/cargo-cooldown is required to run this
script.  Its purpose is to run `cargo update` while respecting
the dependency cooldown options found in cooldown.toml in the
root of the repo

ci/update-cargo-deps-with-cooldown.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# You need: https://crates.io/crates/cargo-cooldown
+# This script is logically equivalent to running `cargo update`
+# but respects dependency cooldown settings found in the cooldown.toml
+# config file
+cargo cooldown update

cooldown.toml

@@ -0,0 +1,34 @@
+# Generated by `cargo cooldown init`.
+# Edit values as needed for your project.
+
+[cooldown]
+incompatible-publish-age = "deny"
+# `floor` keeps initial Cargo.lock versions as the minimum; `ignore` allows lower versions.
+lockfile-baseline = "floor"
+
+[registry]
+global-min-publish-age = "14 days"
+
+# Optional allow rules.
+# Add as many `allow.exact` and `allow.package` entries as you need.
+# `allow.exact` fully allows one exact crate version.
+# `allow.package` lowers the cooldown for one crate name.
+# Use `min-publish-age = "0"` in `allow.package` to exclude that crate from cooldown.
+
+# [allow.global]
+# minutes = 1440
+
+# [[allow.package]]
+# crate = "tokio"
+# min-publish-age = "1 hour"
+
+# [[allow.package]]
+# crate = "openssl"
+# min-publish-age = "0"
+
+# [[allow.exact]]
+# crate = "serde"
+# version = "1.0.218"
+# [[allow.exact]]
+# crate = "serde_json"
+# version = "1.0.145"