feat: workspace auto-detect, color parity, SARIF validation, LLM providers

[aadviksinghdebug]

• Auto-detect workspace root by walking parent dirs ([contrib-wave] CLI: Auto-detect Cargo.toml workspace root in subdirectories #770)
• TTY-aware color helpers via commands/color.rs; --no-color flag ([contrib-wave] CLI: TTY-aware color parity across all subcommands #771)
• SARIF 2.1.0 output with jsonschema pre-emission validation ([contrib-wave] CLI: Pre-emit SARIF 2.1.0 validation #772)
• OpenAI/Anthropic provider abstraction with caching, rate-limit, cost-cap ([contrib-wave] Frontend: Replace stubbed /api/ai/explain with real LLM provider integration #775)
• Fix 13 pre-existing compilation errors in suppress.rs, serve.rs, finding_codes.rs

Closes #770
Closes #771,
Closes #772
Closes #775

Summary

• [contrib-wave] CLI: Auto-detect Cargo.toml workspace root in subdirectories #770 (workspace root detection) — workspace.rs walks parent dirs to find Cargo.toml with [workspace]
• [contrib-wave] CLI: TTY-aware color parity across all subcommands #771 (TTY-aware color parity) — color.rs with centralized c::red(), c::bold(), etc; --no-color CLI arg; updated all 10 subcommands
• [contrib-wave] CLI: Pre-emit SARIF 2.1.0 validation #772 (SARIF validation) — sarif.rs with validate_sarif() + build_sarif_log(); --format sarif; schema at schemas/sarif-2.1.0.json
• [contrib-wave] Frontend: Replace stubbed /api/ai/explain with real LLM provider integration #775 (LLM providers) — providers.ts with OpenAIProvider, AnthropicProvider, caching, rate-limit, cost-cap; route.ts uses provider abstraction
• Bonus: Fixed 13 pre-existing compilation errors in suppress.rs, serve.rs, finding_codes.rs
  Build Status
• cargo check -p sanctifier-cli — clean (no errors)
• cargo test -p sanctifier-cli — 12/12 passed
  Files Changed (20 modified + 4 new)
  M Cargo.lock (jsonschema now a runtime dep)
  M frontend/app/api/ai/explain/route.ts
  M frontend/app/lib/env.ts
  M frontend/.env.local.example
  M tooling/sanctifier-cli/Cargo.toml
  M tooling/sanctifier-cli/src/commands/analyze.rs (SARIF output + color)
  M tooling/sanctifier-cli/src/commands/{deploy,diff,doctor,export,fix,init,reentrancy,verify,workspace}.rs (color)
  M tooling/sanctifier-cli/src/commands/mod.rs (color + sarif modules)
  M tooling/sanctifier-cli/src/commands/serve.rs (compilation fixes)
  M tooling/sanctifier-cli/src/commands/suppress.rs (compilation fixes)
  M tooling/sanctifier-cli/src/main.rs (--no-color flag)
  M tooling/sanctifier-core/src/finding_codes.rs (duplicate field fix)
  ?? tooling/sanctifier-cli/src/commands/color.rs
  ?? tooling/sanctifier-cli/src/commands/sarif.rs
  ?? frontend/app/api/ai/explain/providers.ts
  ?? schemas/sarif-2.1.0.json
  To commit and push:
  git add -A && git commit -m "feat: workspace auto-detect, color parity, SARIF validation, LLM providers
• Auto-detect workspace root by walking parent dirs ([contrib-wave] CLI: Auto-detect Cargo.toml workspace root in subdirectories #770)
• TTY-aware color helpers via commands/color.rs; --no-color flag ([contrib-wave] CLI: TTY-aware color parity across all subcommands #771)
• SARIF 2.1.0 output with jsonschema pre-emission validation ([contrib-wave] CLI: Pre-emit SARIF 2.1.0 validation #772)
• OpenAI/Anthropic provider abstraction with caching, rate-limit, cost-cap ([contrib-wave] Frontend: Replace stubbed /api/ai/explain with real LLM provider integration #775)
• Fix 13 pre-existing compilation errors in suppress.rs, serve.rs, finding_codes.rs

[vercel]

@ritik4ever is attempting to deploy a commit to the gbangbolaoluwagbemiga's projects Team on Vercel.

A member of the Team first needs to authorize it.

[drips-wave]

@aadviksinghdebug Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits