chore: close the absolute Clippy gate

[Lee-take]

What changed

• publishes the frozen 17-commit L0B/L0C series that removes the repository's historical Rust Clippy debt without changing the DS Agent/DeepSeek ownership boundary
• preserves the reviewed command, connector, persistence, enum, lock, and workflow-repair semantics
• leaves release files, tags, Releases, assets, deployment state, and C4A untouched

Why

L0D is the absolute closeout gate before C4A. The exact repository Clippy command must be green in fresh isolation and the same exact source must pass pull-request and exact-main CI.

Exact identity

• head commit: 3533643f3e183681afae52cda4d792604c766ec6
• head tree: 8d7a74fe278d85a17ba46f9c78865193a77f2ea3
• base before merge: 6c1ef5d0c4856c84daaae1ce5b07e9a0fd19a396
• branch: codex/ds-agent-step-3

Local L0D verification

• exact independent JSON Clippy: exit 0, 0 primary diagnostics, 0 unique diagnostics
• focused workflow tests: 19 passed, 0 failed, 0 ignored
• full serial Rust tests: 960 passed, 0 failed, 7 ignored
• Cargo fmt, repository secret scan, release-source, immutability/diff/source audits, and CodeGraph: passed
• evidence manifest: 35/35 entries, SHA-256 9c1c64125341f8552619bbfe9a24d1884ae0e152f0d81c21e998776acfb40f55