Pull request 'feat-ai/security-remediation' (#1) from feat-ai/security-remediation into main

ci: cover audio targets and clean up TTS test fixtures

ci: replace archived Rust setup action with pinned rust-toolchain

docs: accept six-lens remediation and archive OpenSpec changes

test: use exact aggregate plus one SSE output boundary

ci: cover audio targets and clean up TTS test fixtures

ci: replace archived Rust setup action with pinned rust-toolchain

docs: accept six-lens remediation and archive OpenSpec changes

test: use exact aggregate plus one SSE output boundary

test: cover gRPC aggregate output budget plus one byte

test: initialize gRPC fixture without field reassignment

docs: specify bounded gRPC normalized output

fix: bound collected gRPC metadata expansion before mapping

docs: clarify acceptance history and synchronize security specifications

fix: close six-lens SSE and input validation findings

docs: close SSE implementation and publication tasks

docs: record security contracts and SSE implementation acceptance

fix: make SSE framing linear and bound normalized outputs

fix: close reviewed response deadlines and add regression coverage

fix: pin CI actions to immutable commits

fix: refuse existing TTS output files atomically

fix: bound provider HTTP and streaming responses

fix: admit STT calls before parsing and stream chunks lazily

feat: add SaluteSpeech STT and TTS

spec: close immediately decidable items for add-salutespeech-stt-tts

Add dragon style profile banner

Remove broken GitHub stats block