WolfProxy v0.4.11

v0.4.11: surface include failures + clippy-clean with CI gate

WolfProxy silently swallowed include problems: a glob that matched no
files (e.g. Debian's extensionless sites-enabled entries vs *.conf) or
an explicit include of a missing file just produced an empty config,
and wolfproxy --test printed "configuration OK" regardless. Real nginx
errors loudly here, so the operator had no signal why their sites weren't
served (wabil report).

• NginxConfig gains include_warnings: Vec, populated for a
  zero-match glob, a missing explicit include, or an invalid glob.
  merge_configs propagates them up nested include chains.
• wolfproxy --test now prints each include warning (still exit 0: a
  missing include never takes the proxy down, and failing would make
  WolfStack's reload-gate refuse to reload a node with a pre-existing
  broken include). The server-block count remains the primary signal.
• The live loader logs the same warnings via warn! on startup/reload.
• Server-context include failures (snippets) now warn instead of being
  dropped silently.

Also clears all clippy warnings at root (manual_strip -> strip_prefix/
strip_suffix, map_entry, while_let -> for, let_and_return,
unnecessary_map_or; one documented allow for the 8-arg request handler)
and adds a CI lint gate (cargo clippy --all-targets -- -D warnings +
tests) that blocks the release build.

---

Verifying this release

Each binary is signed via cosign keyless OIDC and ships with a SLSA build provenance attestation.

Verify the cosign signature:

cosign verify-blob \
  --bundle wolfproxy-x86_64.cosign.bundle \
  --certificate-identity-regexp 'https://github.com/wolfsoftwaresystemsltd/wolfproxy/\.github/workflows/release\.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  wolfproxy-x86_64

Verify the build provenance:

gh attestation verify wolfproxy-x86_64 --repo wolfsoftwaresystemsltd/wolfproxy

Verify the SHA-256 checksum:

sha256sum -c SHA256SUMS

Artifacts

• wolfproxy-x86_64 / wolfproxy-aarch64 — static musl binaries (Linux x86_64 and ARM64).
• wolfproxy-<arch>.cosign.bundle — cosign signature bundle (cert + signature + Rekor entry).
• SHA256SUMS — checksums for both binaries.