dependencies clean-up

[tzemanovic]

todo:

• get rid of workspace patches and re-export 3rd party crates that appear in public API of a crate
  • borsh is blocked by update borsh to v1.2.0 #1563
• make sure that every sub-crate can be built with default features
• switch to use workspace inheritance added in rust 1.64
• reduce the amount of duplicate deps (detect with cargo tree --duplicates and potentially add an automated test in CI for this)

[Fraccaman]

we might want also to look at:

• Cargo Udeps #1024
• Cargo Audit #1023

[cwgoes]

Closing this for now per @brentstone but we should periodically check before cutting a release.