fix: fileset, toset, dep updates

[fwereade]

• updates defsec dependency to be based on the new upstream trivy (which is being actively developed and includes fixes for much of several terraform functions with issues #193 and module input / output with nested modules #194)
  • actually points at this fork, which includes the ability to glob files outside the FS root
  • no longer generates various spurious data/resources, as seen in test updates, which is good
  • now skips null values in dynamic for_each, which is less good, but doesn't seem to outweigh the benefits

[ajkerrigan]

Thanks for the updates, helpful change for sure 👍

[ajkerrigan]

Merged cloud-custodian/trivy#1 so this hash could be updated, but as discussed separately that's not a critical change