Pin the toolchain to Rust 1.98 via rust-toolchain.toml and bump the builder image to rust:1.98-trixie. Move the runtime image from Debian bookworm to trixie, replacing libssl3 with libssl3t64 which is the OpenSSL runtime package name in trixie.