ci: adopt RUST-033 — mandatory local soldr lint (clippy + Dylint, all targets); Dylint proven before merge queue #1793

Fleet policy RUST-033 (forge-ci/ci.yml#511, #512) now applies to this repository.

• The local gate has a lint lane that runs soldr lint rust --cross-dylint: clippy --all-targets with CI's feature set and -D warnings, plus Dylint, for every target in [workspace.metadata.soldr].targets. That target list must match the remote lint job's.
• No replay selection or minimal-skip-steps entry drops a clippy target, --all-targets or the Dylint pass.
• ci-attestations.yml declares rust/<target>/clippy and rust/<target>/dylint gates (or rust/all/...).
• The lint lane is enforced even in shadow mode: check-push and verify refuse a missing or stale lint attestation. Runtime test lanes stay optional.
• The merge-queue enqueue requires a valid Dylint attestation or a successful Dylint job on the head SHA.
• A warm re-run on an unchanged tree takes at most the larger of 30 s or 10% of a cold run. Otherwise, file a soldr cache defect with the soldr[cache] MISS lines.