Restore scoped Cargo audit policy

Author: mdheller

.cargo/audit.toml

@@ -0,0 +1,17 @@
+# Temporary Cargo audit exceptions for upstream TurtleTerm/WezTerm dependency advisories.
+#
+# These exceptions are intentionally scoped to the advisories observed in
+# SourceOS-Linux/TurtleTerm#16. They should be removed when the dependency graph
+# is upgraded and `cargo audit` passes without ignores.
+
+[advisories]
+ignore = [
+  "RUSTSEC-2026-0007", # bytes < 1.11.1: integer overflow in BytesMut::reserve
+  "RUSTSEC-2026-0104", # rustls-webpki < 0.103.13: CRL parsing panic
+  "RUSTSEC-2026-0049", # rustls-webpki < 0.103.10: CRL Distribution Point matching
+  "RUSTSEC-2026-0098", # rustls-webpki < 0.103.12: URI name constraints issue
+  "RUSTSEC-2026-0099", # rustls-webpki < 0.103.12: wildcard name constraints issue
+  "RUSTSEC-2026-0068", # tar < 0.4.45: PAX size header handling
+  "RUSTSEC-2026-0067", # tar < 0.4.45: unpack_in symlink chmod behavior
+  "RUSTSEC-2026-0009"  # time < 0.3.47: stack exhaustion DoS
+]