feat(idris-dependents): read-only audit for external Idris2 dependents

.github/workflows/rust.yml

@@ -45,6 +45,8 @@ jobs:
             dir: dashboard
           - module: rhodibot
             dir: bots/rhodibot
+          - module: idris-dependents
+            dir: idris-dependents
     defaults:
       run:
         working-directory: ${{ matrix.dir }}

Justfile

@@ -113,6 +113,11 @@ validate-rsr-drift:
 refresh-rsr-census:
     @bash scripts/rsr-census.sh --refresh
 
+# Read-only audit: external Idris2 projects depending on our packages (GitHub
+# code search, GET only; needs GITHUB_TOKEN). Evidence goes to OUT.
+audit-idris-dependents OUT="idris-dependents.json" *ARGS:
+    cd idris-dependents && cargo run --release -- scan --json "{{invocation_directory()}}/{{OUT}}" {{ARGS}}
+
 # Clean all build artifacts
 clean:
     cd robot-repo-automaton && cargo clean

idris-dependents/.gitignore

@@ -0,0 +1,2 @@
+# SPDX-License-Identifier: MPL-2.0
+/target/