🛡️introduce extremely strict checks and rules

[renardeinside]

Summary

• Move repeated #![forbid(...)] / #![deny(...)] lint attributes from 8 source files into a single [workspace.lints] section in root Cargo.toml, with each crate inheriting via [lints] workspace = true
• Split pre-commit clippy into two passes: strict for lib+bins, relaxed (-A unwrap-used/expect-used/panic) for test targets — so test code doesn't need scattered #[allow] overrides
• Refactor build scripts (core/build.rs, apx/build.rs) and studio/src/main.rs to use Result + ? instead of unwrap/expect/panic
• Add #[derive(Debug)] to 3 databricks_sdk structs now covered by missing_debug_implementations

Test plan

• cargo check passes
• cargo clippy passes (both lib+bins and test targets)
• cargo test — all 388 tests pass
• Pre-commit hook passes end-to-end

🤖 Generated with Claude Code