cabal: relax all deps' upper bounds

In semver.org we trust.
main: update to new WarpTLS API