Hey,
We are using stac-rs tooling in production (and are pretty satisfied). We've found a restriction on using the PgStac backend which is that the pool type requires an unencrypted connection. See this line.
To get around this, we used the same approach as the sqlx library to implement an unverified TLS connection. We think this is a more suitable default for a Postgres connection as often Postgres is setup by default to reject connections that don't use TLS, verified or not.
I'd be more than happy to contribute this as a short PR.