add global-min-publish-age to mitigate supply chain attacks

- required bumping to nightly-2026-06-21 and fixing downstream clippy errors

Author: JasonVranek

.github/workflows/ci.yml

@@ -26,7 +26,7 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@master
         with:
-          toolchain: nightly-2026-01-01
+          toolchain: nightly-2026-06-21
           components: clippy, rustfmt
 
       - name: Install protoc