ci: add pilot v1 hardening guards

.github/workflows/ci.yml

@@ -23,6 +23,12 @@ jobs:
       - name: Run production inventory placeholder guard self-test
         run: bash scripts/check_production_inventory_placeholders.sh --self-test
 
+      - name: Run private-config guard
+        run: bash scripts/check_private_config_guard.sh
+
+      - name: Run portal contract sync guard
+        run: node scripts/check_portal_contract_sync.mjs
+
   rust-runtime-guard:
     runs-on: ubuntu-latest
     steps:

.github/workflows/rust-workspace.yml

@@ -0,0 +1,31 @@
+name: rust-workspace
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  rust-workspace:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install Rust 1.85
+        uses: dtolnay/rust-toolchain@1.85.0
+        with:
+          components: rustfmt, clippy
+
+      - name: Format
+        run: cargo fmt --manifest-path adk-rust/Cargo.toml --all -- --check
+
+      - name: Test
+        run: cargo test --manifest-path adk-rust/Cargo.toml --workspace
+
+      - name: Clippy
+        run: cargo clippy --manifest-path adk-rust/Cargo.toml --workspace --all-targets -- -D warnings
+
+      - name: Release build
+        run: cargo build --manifest-path adk-rust/Cargo.toml --workspace --release