45.0.6 release

Bump for release (#13249)

* Bump for 45.0.6 release

* Use mitmproxy's uv.lock for downstream tests (#13022)

* use mitmproxy's uv.lock for downstream tests

* add `--locked`

* install deps for downstream tests into a venv with uv (#13192)

* install deps for downstream tests into a venv with uv

* this needs to use the venv pyhon too

* stop trying to do shell hijinx

* install pip for certbot

* fall back o regular pip someimes

* try to get cryptography installed into the venv for scapy

* allow us to debug

* fix override syntax

* oops, one fewer

* computer

* try fixing paramiko dev (#13239)

* hack to fix coverage (#13161)

* hack to fix coverage

* Update ci.yml

* Update ci.yml

* Update ci.yml

* Attempt to fix coverage due to rust nonsense (#13153)

* attempt to fix inane coverage nonsense (#13156)

* coverage fix, cherry pick of dac365309e42903a06441bb34bc6a29a3b6bcc72

---------

Co-authored-by: Maximilian Hils <git@maximilianhils.com>

• .github/downstream.d/aws-encryption-sdk.sh[diff]
• .github/downstream.d/certbot-josepy.sh[diff]
• .github/downstream.d/certbot.sh[diff]
• .github/downstream.d/dynamodb-encryption-sdk.sh[diff]
• .github/downstream.d/mitmproxy.sh[diff]
• .github/downstream.d/paramiko.sh[diff]
• .github/downstream.d/pyopenssl-release.sh[diff]
• .github/downstream.d/pyopenssl.sh[diff]
• .github/downstream.d/scapy.sh[diff]
• .github/downstream.d/sigstore.sh[diff]
• .github/downstream.d/twisted.sh[diff]
• .github/workflows/ci.yml[diff]
• CHANGELOG.rst[diff]
• pyproject.toml[diff]
• src/cryptography/__about__.py[diff]
• src/rust/cryptography-openssl/src/aead.rs[diff]
• src/rust/src/backend/aead.rs[diff]
• src/rust/src/buf.rs[diff]
• vectors/cryptography_vectors/__about__.py[diff]
• vectors/pyproject.toml[diff]