chore: align dependency and style tooling

[yvette-carlisle]

Summary

• roll Rust dependencies, including thiserror 2.0.18 and lockfile transitives
• add Decodex-style cargo-make, clippy, Taplo, rustfmt, toolchain, and dotfile configuration
• introduce vibe-style validation and move CI checks to direct cargo-make tasks with SHA-pinned actions
• set the crate edition to Rust 2024

Validation

• cargo make check
• cargo package --allow-dirty --locked
• cargo metadata --locked --format-version 1 --no-deps
• git diff --check

Review

• Skeptic subagent review completed; TOML formatting CI gap was fixed by installing taplo-cli and running cargo make fmt-check.