Bump dcap-qvl to 0.5.2

[ameba23]

This bumps dcap-qvl from a (previously) unreleased pinned commit to the 0.5.2 release, and updates to accommodate breaking changes.

This is needed in order to bump the transitive dependency reqwest which in turn introduces hickory-proto which has a known vulnerability: https://github.com/flashbots/attested-tls/security/dependabot/18

However this does not completely resolve the issue as ra-tls still depends on an older version of dcap-qvl.

The new verifier requires tdxModule from tcb_info info which meant making some updates to mock-tdx and the mock collateral used in tests.