Revert "Revert "Rust: allow to specify more cargo configuration options""

[redsun82]

Reverts #18011, bringing back #17937 and fixing it:

• added third dependencies were not vendored
• the changes in Rust: allow to specify more cargo configuration options #17937 were also breaking reading a list of elements from options.yml as introduced by Rust: add optional dependencies to ql tests #18002. This required a more advanced deserialization function, able to deserialize both a string (splitting on , and \n) or something that is already a sequence (like in the options.yml case).