7e54061cbb
- Added scripts/gen-clippy-bazelrc.ts: emits bazel/clippy.bazelrc from [workspace.lints] in Cargo.toml (groups by ascending priority, then per-lint overrides, alphabetical within each tier); --check mode verifies sync without writing. - release.ts regenerates it alongside the lockfiles; the release_gate CD job runs the --check so drift only blocks publishing, never ordinary CI. Added the gen:clippy package script.