Upgrade bundled OpenSSL to 3.6.3 (#29487)

## Summary

- upgrade the bundled OpenSSL source from 3.5.5 to 3.6.3
- update the Bazel `openssl-sys` build dependency to use the upgraded
source crate
- refresh the Bazel module lockfile

## Why

OpenSSL 3.5.5 is within the affected ranges for security issues fixed in
later releases. The Rust `openssl-src` wrapper does not currently
publish OpenSSL 3.5.7, so this moves the vendored Linux musl build to
the available patched 3.6.3 release.

MODULE.bazel

@@ -309,7 +309,7 @@ crate.annotation(
     # Build scripts compile in Bazel's exec configuration, so target-specific
     # optional build deps are otherwise dropped for the musl release platforms.
     build_script_deps = [
-        "@crates//:openssl-src-300.5.5+3.5.5",
+        "@crates//:openssl-src-300.6.1+3.6.3",
     ],
     build_script_env = {
         "OPENSSL_DIR": "$(execpath @openssl//:gen_dir)",