Port vncli from vecnode: pure-Rust researcher CLI - #1

…hema

cargo fmt --check was failing on rustfmt drift inherited from the source
repo. cargo-deny (via EmbarkStudios/cargo-deny-action@v2, unpinned) now
resolves a newer cargo-deny release whose config schema dropped
vulnerability/unsound/notice as advisories fields, db-path/db-urls under
[licenses], and the deny/copyleft/allow-osi-fsf-free/default fields there
too - licenses are now purely an allow-list. Updated deny.toml accordingly.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

The custom db-urls pointed at a raw db.toml.gz snapshot format current
cargo-deny doesn't fetch that way, causing a metadata-parse crash in CI.
Falling back to cargo-deny's built-in default (git clone of
rustsec/advisory-db) instead.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

- vn crate was missing a license field; add license = "MIT" to match the
  workspace license.
- Bump anyhow 1.0.102 -> 1.0.103 (fixes RUSTSEC-2026-0190, an
  Error::downcast_mut unsoundness) and crossbeam-epoch 0.9.18 -> 0.9.20
  (fixes RUSTSEC-2026-0204, an invalid pointer deref in fmt::Pointer);
  both are transitive deps pulled to exactly their patched versions.
- openssl is banned but still reachable transitively via ollama-rs's own
  reqwest dependency (it doesn't disable reqwest's default-tls feature,
  and Cargo's feature unification pulls that into our single resolved
  reqwest even though our direct dependency is rustls-only and is the
  only TLS path our own code uses). Allow it only when reached through
  native-tls so an unrelated new openssl dependency would still be caught.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…lama-rs

webpki-roots ships CA cert data under CDLA-Permissive-2.0 (data license,
not code) - add it to the allow-list. ollama-rs's published Cargo.toml
omits a license field even though its repo's LICENSE.md is MIT; add a
clarify entry (hash is a placeholder, to be corrected from CI's report).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

option-ext (a small dirs-sys dependency) is MPL-2.0, which unlike
GPL/AGPL only applies copyleft at the file level and is broadly
considered safe to depend on without copyleft obligations on our own code.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…e input

rustsec/audit-check@v2's actual inputs are token/ignore/working-directory
(no file input - that was carried over from the older actions-rs/audit-check
action this config was likely modeled on). The unrecognized file: input was
silently ignored, so it defaulted to repo root and couldn't find Cargo.lock
under cli/.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Remote memory exhaustion via unbounded out-of-order stream reassembly,
patched at >=0.11.15. quinn-proto is a transitive dep (rmcp's
transport-streamable-http-server -> quinn stack). paste (unmaintained)
and lru (unsound) advisories remain but are informational-only per
cargo-audit's default config and don't fail the check.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>