Merge pull request #31 from Spacecraft-Software/agent-harden #76

Job	Run time
test (ubuntu-latest)	39s
headless build (no TUI / clipboard deps)	34s
cargo-deny	37s
clippy	29s
test (macos-latest)	1m 7s
rustfmt	13s
vault --version emits §13.2 attribution	39s
cargo-audit	3m 5s
	7m 23s

Provide feedback