chore: harden build configuration and dev tooling

.gitignore

@@ -4,3 +4,7 @@
 .sisyphus/
 result
 .idea/
+**/*.rs.bk
+coverage/
+*.profraw
+.env

.rustfmt.toml

@@ -0,0 +1,4 @@
+edition = "2024"
+max_width = 100
+use_field_init_shorthand = true
+use_try_shorthand = true

Cargo.toml

@@ -10,7 +10,10 @@ clap = { version = "4.6", features = ["derive"] }
 dirs = "6"
 exn = "0.3"
 humantime = "2"
-reqwest = { version = "0.13", default-features = false, features = ["json", "rustls"] }
+reqwest = { version = "0.13", default-features = false, features = [
+  "json",
+  "rustls",
+] }
 secrecy = { version = "0.10", features = ["serde"] }
 self-replace = "1"
 semver = "1"

deny.toml

@@ -25,3 +25,7 @@ confidence-threshold = 0.9
 # ships as a binary via GitHub Releases, not to crates.io, so it has no
 # project license and cargo-deny should skip license checks for it.
 ignore = true
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "deny"

flake.nix

@@ -36,7 +36,7 @@
         }:
         let
           pname = "graylog-cli";
-          version = "0.0.3-alpha";
+          version = (builtins.fromTOML (builtins.readFile ./Cargo.toml)).package.version;
           commonArgs = {
             inherit pname version;
             src = self;
@@ -98,8 +98,7 @@
                 cargo-edit
                 cargo-watch
                 cargo-wizard
-                openssl
-                pkg-config
+                cargo-nextest
                 rust-analyzer
               ]
               ++ config.pre-commit.settings.enabledPackages;
@@ -114,7 +113,6 @@
           };
         };
       flake.overlays.default = final: prev: {
-        nodejs = final.nodejs_24;
         rustToolchain =
           with inputs.fenix.packages.${prev.stdenv.hostPlatform.system};
           combine (