- quality_gate_strict.sh: fail hard when cargo-deny is not installed
instead of silently skipping, and let set -e handle check failures
- deny.toml: remove empty [graph].targets so cargo-deny checks all
platforms instead of only the runner's default target
Co-Authored-By: Claude Opus 4.6 <[email protected]>
- Use EmbarkStudios/cargo-deny-action@v2 instead of cargo install
for faster CI execution
- Fix quality_gate_strict.sh to check for cargo-deny availability
instead of suppressing stderr
Co-Authored-By: Claude Opus 4.6 <[email protected]>
Add dependency auditing via cargo-deny to catch license violations,
security advisories, and untrusted sources. Integrates into CI as a
parallel job alongside clippy, and into the local quality gate script.
Co-Authored-By: Claude Opus 4.6 <[email protected]>
