feat: audit fixes — graceful OTEL, async-safe plugins, URL validation, +100 tests #104

	name: CI

	on:
	pull_request:
	push:
	branches:
	- main

	env:
	CARGO_TERM_COLOR: always

	jobs:
	lint:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-node@v4
	with:
	node-version: '20'
	- name: Build frontend
	run: cd web && npm ci && npm run build
	- uses: dtolnay/rust-toolchain@stable
	with:
	components: rustfmt, clippy
	- uses: Swatinem/rust-cache@v2
	- name: Format
	run: cargo fmt -- --check
	- name: Clippy
	run: cargo clippy -- -D warnings

	security:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	- name: Install cargo-audit
	run: cargo install cargo-audit --locked
	- name: Audit dependencies
	run: cargo audit

	test:
	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	os: [ubuntu-latest, macos-latest, windows-latest]
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-node@v4
	with:
	node-version: '20'
	- name: Build frontend
	run: cd web && npm ci && npm run build
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	- name: Test
	run: cargo test

Provide feedback