Mark surf and tide as unmaintained

[djc]

Affected crate(s)

• tide (290k recent downloads per crates.io)
• surf (386k recent downloads per crates.io)

Links to upstream issue(s) or PR(s)

• Is this project still maintened ? http-rs/tide#922
• Maintenance status http-rs/surf#352

Severity

After discussing with @yoshuawuyts, it appears to make sense that all crates in the http-rs GitHub org are effectively unmaintained. The lower-level http-types crate is covered here:

• Add advisory for http-types: violated ASCII invariants #2923

Checklist

• Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate