Closes ADR-172 §5c (no cargo-audit in CI). New GitHub Actions workflow
.github/workflows/hailo-backend-audit.yml runs four jobs on every
push/PR touching the hailo-backend branch's three crates or its ADRs:
* audit — `cargo audit --deny warnings` against the cluster
crate's Cargo.lock (205 deps; 0 vulns at land time)
* clippy — `cargo clippy --all-targets -- -D warnings` (cached)
* test — full suite: 75 lib + 12 cluster + 18 CLI + 7 doctest
* doc-warnings — `RUSTDOCFLAGS='-D missing-docs' cargo doc` (locks in
iter-75's #![warn(missing_docs)] enforcement)
Independent of the parent workspace's CI because the hailo crates are
excluded from the default workspace build (need libhailort for the
worker bin which CI can't install).
Also lands `crates/ruvector-hailo-cluster/deny.toml` for a future
cargo-deny pass: x86_64 + aarch64 targets, MIT/Apache/BSD/ISC license
allowlist, denies wildcards + unknown registries + unknown git sources.
Workflow doesn't run cargo-deny yet — config sits ready for the iter
92 follow-up after a clean `cargo deny check` pass against the dep tree.
Co-Authored-By: claude-flow <ruv@ruv.net>
cb7bd38872