paper: launch_overhead_rust pins tokio 1.53.0 and patches crates to a local path #1622

Summary

cutile-rs/cutile-benchmarks/paper/sec5_exp2_execution_mode_overhead/launch_overhead_rust/Cargo.lock pins tokio 1.53.0. That is below the patched line for RUSTSEC-2026-0386 (>=1.53.3 on the 1.53 series).

cargo update cannot rewrite the lock from this tree. The manifest's [patch.crates-io] points at /home/elibol/dev/cutile-rs/..., and those directories are not in the checkout. Cargo stops while loading cuda-async before it can move tokio.

Why this is separate

• fix: bump example tokio pins past RUSTSEC-2026-0386 #1619 bumps the locks Cargo can resolve. This one is not among them.
• ci: run cargo deny on the cutile-rs workspace #1620 / ci: run cargo deny on the cutile-rs workspace #1621 run cargo deny on cutile-rs/Cargo.toml only. The paper workspaces stay out, and this manifest would not load under that check until the patches point at this tree.
• No CI job builds launch_overhead_rust. The paper run.sh scripts are the only callers, and they need those local paths.

Fix

Point the patches at the crates in this repository, then move tokio to 1.54.1 (or any >=1.53.3).