Dependencies: bump OpenSSL/curl for security and refresh low-risk submodules

Add targeted vcpkg overrides for openssl (3.5.0 -> 3.6.2) and curl (8.14.1 -> 8.20.0) to pick up security fixes, while leaving the builtin-baseline untouched to avoid a broad, risky version sweep (a full baseline bump pulled libusb 1.0.30, which needs autoreconf tooling not present on the Linux CI images).

Also bump the header-only Vulkan-Headers and the small ZArchive submodule to their latest upstream commits.

dependencies/Vulkan-Headers

@@ -1 +1 @@
-Subproject commit 01393c3df0e5285b54ee6527466513f9e614be94
+Subproject commit 8c2683390a4b10c0483e3b531555dfb841e2cd84

dependencies/ZArchive

@@ -1 +1 @@
-Subproject commit d2c717730092c7bf8cbb033b12fd4001b7c4d932
+Subproject commit 965b66c8d67b6b7e30fd63b3b75aa91a99ff303b

vcpkg.json

@@ -81,6 +81,14 @@
     {
       "name": "wxwidgets",
       "version": "3.3.1"
+    },
+    {
+      "name": "openssl",
+      "version": "3.6.2"
+    },
+    {
+      "name": "curl",
+      "version": "8.20.0"
     }
   ]
 }