feat(assail): exclude vendored-snapshot dirs (.yarn, idaptik-rescript13-staging, rescript-ecosystem) from analysis

[hyperpolymath]

Summary

Adds 3 directory names to the skip lists in `walk_directory` and `count_languages_recursive`:

• `.yarn` — Yarn 4 cached release blobs (e.g. `yarn-4.12.0.cjs`)
• `idaptik-rescript13-staging` — ReScript 13 staging tree embedded in several estate repos
• `rescript-ecosystem` — vendored upstream ReScript packages

These are vendored upstream snapshots; flagging findings against them produces noise the project cannot fix.

Motivation

`developer-ecosystem#83` logged 166 findings, ~70% of which fall in these paths.

Changes

• `src/assail/analyzer.rs` (`walk_directory`): append the 3 directory names to the inline skip list.
• `src/assail/analyzer.rs` (`count_languages_recursive`): append the 2 snapshot names (`.yarn` is already covered by the existing dot-prefix skip).
• 3 regression tests verify each subtree is skipped while first-party sibling files are still walked.

Test plan

• `cargo test --lib walk_skips` — all 3 new tests pass locally
• CI green
• Re-scan developer-ecosystem to confirm finding drop

🤖 Generated with Claude Code

[hyperpolymath]

Note: auto-closed by a botched force-push during rebase (the rebase --continue's --no-edit flag is invalid, so the push went out with the wrong HEAD which equalled main, auto-closing this PR as no-change). The intended content was refiled as #77 and merged. No action needed here.

[github-actions]

🔍 Hypatia Security Scan

Findings: 74 issues detected

Severity	Count
🔴 Critical	7
🟠 High	16
🟡 Medium	51

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in boj-build.yml",
    "type": "unknown",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in cargo-audit.yml",
    "type": "unknown",
    "file": "cargo-audit.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "unknown",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "unknown",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "unknown",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in coverage.yml",
    "type": "unknown",
    "file": "coverage.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dependency-review.yml",
    "type": "unknown",
    "file": "dependency-review.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence