locks: weekly update

[flake-explorer-lock-updater]

Weekly nix flake update, with the devenv pins re-derived from flake.lock by scripts/sync-devenv-lock.ts. The devenv CI job verifies lock parity and the environment's enterTest contract.

[github-actions]

Code Metrics Report

SPA test suite — bun test --coverage, floor 96%.

	main (87cec0a)	#132 (7091e56)	+/-
Coverage	96.4%	96.4%	+0.0%
Test Execution Time	4s	4s	0s

Details

  |                     | main (87cec0a) | #132 (7091e56) |  +/-  |
  |---------------------|----------------|----------------|-------|
+ | Coverage            |          96.4% |          96.4% | +0.0% |
  |   Files             |             56 |             56 |     0 |
  |   Lines             |          11578 |          11578 |     0 |
+ |   Covered           |          11165 |          11166 |    +1 |
  | Test Execution Time |             4s |             4s |    0s |

Code coverage of files in pull request scope (98.9% → 100.0%)

Files	Coverage	+/-	Status
scripts/tree-rss.ts	100.0%	+1.0%	affected

Code Metrics Report (rust)

Rust crate — cargo llvm-cov outside the nix sandbox, ratcheted against main.

	main (87cec0a)	#132 (7091e56)	+/-
Coverage	90.4%	90.4%	0.0%
Test Execution Time	1m46s	1m56s	+10s

Details

  |                     | main (87cec0a) | #132 (7091e56) | +/-  |
  |---------------------|----------------|----------------|------|
  | Coverage            |          90.4% |          90.4% | 0.0% |
  |   Files             |             18 |             18 |    0 |
  |   Lines             |           5528 |           5528 |    0 |
  |   Covered           |           4999 |           4999 |    0 |
- | Test Execution Time |          1m46s |          1m56s | +10s |

---

Reported by octocov, composed by the build job.