[furedea]

• ci: add cargo machete audit
• ci: add cargo deny audit

[Copilot]

Pull request overview

This PR extends the repository’s CI “audit” job and local dev shell to include cargo-deny checks, alongside the existing cargo-machete audit, and adds the corresponding deny.toml policy/config plus crate license metadata.

Changes:

• Add cargo-deny to the Nix dev shell and introduce a root-level deny.toml configuration.
• Update GitHub Actions CI to run EmbarkStudios/cargo-deny-action in the audit job.
• Declare the crate license (MIT) in Cargo.toml to align with the repository’s MIT LICENSE file.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
flake.nix	Adds cargo-deny to the developer shell toolchain.
deny.toml	Introduces cargo-deny policies for advisories, licenses, bans, and sources.
Cargo.toml	Adds license = "MIT" package metadata.
.github/workflows/ci.yml	Runs cargo-deny in CI audit job (pinned action SHA).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.