chore: add #![forbid(unsafe_code)] to safe Rust crates

Adds the forbid(unsafe_code) crate-level attribute to all Rust crates
that do not use unsafe code, hardening the safety guarantee at compile
time.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

opm-canonicalizer/src/main.rs

@@ -1,3 +1,4 @@
+#![forbid(unsafe_code)]
 use serde::de::{self, Deserialize, Deserializer, MapAccess, SeqAccess, Visitor};
 use std::collections::BTreeMap;
 use std::fmt;

rescript-ecosystem/packages/bindings/grpc/codec/src/lib.rs

@@ -9,6 +9,7 @@
 //! - WASM returns base64-encoded protobuf binary
 //! - For decoding, WASM receives base64 binary and returns JSON
 
+#![forbid(unsafe_code)]
 use integer_encoding::{VarInt, VarIntWriter};
 use serde_json::{Map, Value};
 use std::io::Write;

rescript-ecosystem/packages/bindings/grpc/protoc-gen-rescript/src/main.rs

@@ -5,6 +5,7 @@
 //! CodeGeneratorResponse to stdout, generating ReScript types and
 //! optional WASM codec bindings.
 
+#![forbid(unsafe_code)]
 use std::io::{self, Read, Write};
 
 use anyhow::{Context, Result};

rescript-ecosystem/packages/bindings/openapi/src/lib.rs

@@ -6,6 +6,7 @@
 //! This library provides the core functionality for parsing OpenAPI specs
 //! and generating ReScript code including types, validators, and HTTP clients.
 
+#![forbid(unsafe_code)]
 pub mod codegen;
 pub mod ir;
 pub mod parser;

rescript-ecosystem/packages/bindings/tauri/examples/opsm-shell/src-tauri/src/main.rs

@@ -4,6 +4,7 @@
 // main.rs - Rust backend for OPSM shell example
 
 #![cfg_attr(
+#![forbid(unsafe_code)]
     all(not(debug_assertions), target_os = "windows"),
     windows_subsystem = "windows"
 )]

rescript-ecosystem/packages/core/compiler-source/rewatch/src/lib.rs

@@ -1,3 +1,4 @@
+#![forbid(unsafe_code)]
 pub mod build;
 pub mod cli;
 pub mod cmd;

well-known-ecosystem/validator/src/main.rs

@@ -5,6 +5,7 @@
 //!
 //! Validates well-known resources against RFC standards and best practices.
 
+#![forbid(unsafe_code)]
 mod contract;
 mod registry;
 mod rules;