refactor(backend): dedupe TUN reader routing and slim stats snapshot #27

	name: Security Checks

	on:
	push:
	pull_request:

	permissions:
	contents: read

	env:
	CARGO_TERM_COLOR: always

	jobs:
	rust-supply-chain:
	name: Rust dependency audit
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v6
	with:
	submodules: recursive
	- name: Install Rust stable
	uses: dtolnay/rust-toolchain@stable
	- name: Cache cargo registry
	uses: actions/cache@v4
	with:
	path: \|
	~/.cargo/registry/index/
	~/.cargo/registry/cache/
	~/.cargo/git/db/
	target/
	key: ${{ runner.os }}-cargo-security-${{ hashFiles('**/Cargo.toml', 'deny.toml') }}
	restore-keys: \|
	${{ runner.os }}-cargo-security-
	${{ runner.os }}-cargo-
	- name: Generate lockfile for audit tools
	run: cargo generate-lockfile
	- name: Install cargo-deny
	uses: taiki-e/install-action@cargo-deny
	- name: Run cargo-deny
	run: cargo deny check
	- name: Install cargo-audit
	uses: taiki-e/install-action@cargo-audit
	- name: Run cargo-audit
	run: cargo audit --deny warnings

Provide feedback