Complete TDBIN implementation gate

[MelbourneDeveloper]

TLDR

Completes the TDBIN v1 implementation gate: generated Rust codecs, complete runtime wire support, safety/evolution tests, CLI glue, and an enforceable benchmark showing realistic packed TDBIN is smaller and faster than Protobuf.

Details

• Adds the tdbin Rust runtime surface for typed ADT serialization: readers/writers, framing, Cap'n-Proto-style packing, semantic scalars, lists, evolution handling, reflection tooling, fuzz target, golden vectors, and round-trip/size/evolution/packing tests.
• Extends typeDiagram Rust codegen with rust-tdbin codec emission, typed unsupported-shape diagnostics, generated fixture drift guards, and CLI tdbin encode|decode|verify flows.
• Adds benchmark source schemas and reports for the Protobuf comparison. The realistic metric_batch corpus records packed TDBIN at 39,272 bytes vs Protobuf 84,149, encode 16.989 us vs 46.797 us, bare decode 12.074 us vs 31.054 us, and packed decode 29.605 us vs 31.054 us; tiny Person rows remain documented negative controls.
• Updates specs/research/roadmap docs, checks every item in docs/plans/tdbin-implementation-plan.md, and adds future specs for zero-copy readers, columnar layout, TypeScript codecs, width-refined numerics, and TDRPC.
• Carries repo gate work from the diff: CI workflow hardening, Deslop config, CodeQL/dependabot/release updates, coverage ratchets, package updates, and clean-install TypeScript/Vitest fixes.

How Do The Automated Tests Prove It Works?

• make ci passed locally: Prettier, Rust fmt, workspace typecheck, ESLint, banned-deps, Rust clippy/tests, package coverage thresholds, builds, bundle-size, and Playwright e2e. Playwright reported two flaky first attempts that passed on retry; the command exited 0.
• deslop . passed locally with Deslop 0.5.1 using the committed .deslop.toml gate.
• Shipwright gates passed locally: manifest validation, npm run -w typediagram build, node packages/cli/dist/bin.js --version, and node packages/cli/dist/bin.js --version --json.
• TDBIN-specific checks passed locally: cargo bench -p tdbin --bench gate, cargo run -p tdbin --release --example bench, and cargo test -p tdbin --test pack --test size_gate -- --nocapture.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.