Update ttf-parser, and long tail of RustyBuzz adjacent crates

I set out to make sure bumping the RustyBuzz dependency in Typst didn't break anything. It turns out hard to do without ending up with multiple versions of dependencies and conflicting types, but I think I have it all sorted now. This bump will need to be in a release to properly update the lock file, but I already have a working PoC using Git dependencies. The catch is resvg is going to need a release too. I submitted [a PR for that](https://github.com/linebender/resvg/pull/846) which is already merged, so now it's just a matter of waiting for a release. When that is released this manifest can get a final tweak before merge to get rid of the Git dependency.