ci: add extended-lint as a cargo xtask instead of a Python script

.cargo/config.toml

@@ -0,0 +1,2 @@
+[alias]
+xtask = "run --locked --package xtask --"

.github/workflows/ci.yml

@@ -27,7 +27,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@6190aa5fb88a88ee71c12769924bbe63a9ab152e # 1.96.0
         with:
           components: rustfmt
-      - run: cargo fmt --check
+      - run: cargo fmt --all --check
 
   clippy:
     name: Clippy
@@ -46,7 +46,26 @@ jobs:
             ~/.cargo/git
             target
           key: clippy-${{ hashFiles('**/Cargo.lock') }}
-      - run: cargo clippy --locked --all-targets --features test-support -- -D warnings
+      - run: cargo clippy --locked --workspace --all-targets --features test-support -- -D warnings
+
+  extended-lint:
+    name: Extended Lint
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+      - uses: dtolnay/rust-toolchain@6190aa5fb88a88ee71c12769924bbe63a9ab152e # 1.96.0
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: xtask-${{ hashFiles('**/Cargo.lock') }}
+      - run: cargo xtask lint-extended
 
   test:
     name: Test
@@ -63,7 +82,7 @@ jobs:
             ~/.cargo/git
             target
           key: test-${{ hashFiles('**/Cargo.lock') }}
-      - run: cargo test --locked --features test-support
+      - run: cargo test --locked --workspace --features test-support
 
   doc:
     name: Documentation
@@ -82,4 +101,4 @@ jobs:
             ~/.cargo/git
             target
           key: doc-${{ hashFiles('**/Cargo.lock') }}
-      - run: cargo doc --locked --no-deps
+      - run: cargo doc --locked --workspace --no-deps

Cargo.toml

@@ -1,3 +1,6 @@
+[workspace]
+members = ["xtask"]
+
 [package]
 name = "forge"
 version = "0.1.1"
@@ -10,6 +13,9 @@ description = "Declarative development-environment orchestrator for KIND cluster
 name = "praxis-forge"
 path = "src/main.rs"
 
+[lints]
+workspace = true
+
 [features]
 test-support = []
 
@@ -42,7 +48,7 @@ lto = false
 [profile.dev.package."*"]
 opt-level = 2
 
-[lints.rust]
+[workspace.lints.rust]
 dead_code = "deny"
 unsafe_code = "deny"
 missing_docs = "deny"
@@ -65,7 +71,7 @@ noop_method_call = "deny"
 redundant_lifetimes = "deny"
 missing_debug_implementations = "allow"
 
-[lints.clippy]
+[workspace.lints.clippy]
 await_holding_lock = "deny"
 await_holding_refcell_ref = "deny"
 future_not_send = "deny"
@@ -208,7 +214,7 @@ lossy_float_literal = "deny"
 semicolon_inside_block = "deny"
 disallowed_methods = "deny"
 
-[lints.rustdoc]
+[workspace.lints.rustdoc]
 broken_intra_doc_links = "deny"
 private_intra_doc_links = "deny"
 invalid_codeblock_attributes = "deny"

xtask/Cargo.toml

@@ -0,0 +1,18 @@
+[package]
+name = "xtask"
+version = "0.1.0"
+edition = "2024"
+rust-version = "1.96"
+publish = false
+description = "Developer-tooling automation for forge, run via `cargo xtask <task>`."
+
+[[bin]]
+name = "xtask"
+path = "src/main.rs"
+
+[lints]
+workspace = true
+
+[dependencies]
+anyhow = "1.0"
+regex = "1.11"