Introduce automated code auditing into our CI pipelines to help catch known software vulnerabilities early in the development cycle.

• Add cargo audit step for Rust dependencies.
• Add pnpm audit step for Node/JS/TS dependencies.
• Ensure both commands run as part of the CI checks
• Fail the pipeline if vulnerabilities of certain severity are detected (to be defined).
• Allow overrides or ignore lists (e.g., via audit.toml) if necessary to handle known issues.

Future Considerations:

• Explore deeper static analysis tools
• Add dependency update policies or alerts (e.g., via Dependabot).

Keep the initial implementation lightweight and non-disruptive.