ci: cargo-vet failing on fastrand:2.4.0 — blocks all CI since Mar 28

[chaliy]

Summary

The Audit job in CI fails because cargo vet reports fastrand:2.4.0 missing ["safe-to-deploy"]. This has been failing on every push to main since March 28, causing the Check gate job to fail as well.

This is the root cause of all CI failures on main last week (at least 8 failures on main alone, plus cascading failures on PR branches that inherit this).

Error

fastrand:2.4.0 missing ["safe-to-deploy"]

Exit code 255 from cargo vet --locked.

Impact

• Every CI run on main since Mar 28 has the Audit job failing
• The Check gate aggregates job results and also fails
• PR branches that don't have test failures show green Tests but red overall CI due to Audit
• This likely contributed to the 77 CI failures last week

Fix

Run cargo vet certify fastrand 2.4.0 or update supply-chain/config.toml to trust the new version.

Affected runs (sample)

• https://github.com/everruns/bashkit/actions/runs/23682507725 (Mar 28)
• https://github.com/everruns/bashkit/actions/runs/23894750903 (Apr 2)
• https://github.com/everruns/bashkit/actions/runs/23986634111 (Apr 4)

[chaliy]

Already resolved in 46bfbfa (chore(specs): make CI health a hard gate in maintenance checklist #1092). The fastrand:2.4.0 audit was added in that commit and cargo vet --locked now passes.