Use workspace dependencies for all dependencies

[cbgbt]

Description of changes: Most of the heavy lifting here was done by a modified fork of cargo-autoinherit, save for some light formatting. I submitted my patches upstream, but it's not clear yet if they'll take them.

I have a change pending in the SDK to update cargo-deny so that we can lint for workspace dependencies.

Testing done:

• The builds succeed, Cargo.lock has not changed

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.