Pins the slice-3→slice-4 media seam via blob hashes. Any legitimate
change to these files requires updating the pinned hashes in the same
PR, making the seam gate loud and reviewable.
Pinned hashes (main):
- loop_driver.rs: 744bf314ed
- rtc_session.rs: a4c9f2ae64
Signed-off-by: Aaron D. Lee <himself@adlee.work>
deny.toml allows the permissive Rust-ecosystem licenses + our own
GPL-3.0-or-later; bans duplicate versions of tokio/serde/bytes/tracing
to catch dep-tree divergence early; restricts sources to crates.io. CI
runs fmt --check, clippy -D warnings, test --all (matrix: stable +
MSRV 1.85), and cargo deny check on push + PR to main. The CI job
installs libopus-dev — the opus crate's FFI dependency (PORT_PLAN §7
'Core (FFI)' disposition).