Bottom of a three-MR stack for the v0.4 milestone (#4, then #1, then #6).
.gitbay/ci.yml runs cargo test --locked and cargo clippy --all-targets --locked -- -D warnings on every push. It checks for zsh with zsh/zpty first so the differential secret-typing tests fail loudly on a runner without it instead of being skipped.
The runner is Linux, so .githooks/pre-push runs the macos-collector Swift tests on the Mac doing the push (git config core.hooksPath .githooks).
Fixes the two clippy findings -D warnings rejects.
Runner needs zsh. The host (Debian 13) has no zsh, and the runner sandbox cannot install one, so the first build fails at the preflight step by design. As root on the host:
apt-get install -y zsh
then re-trigger the build. Ref #4; it closes once a main build is green.