Implement credential-safe programs smoke gate (#97)

.gitea/workflows/rust-workspace.yml

@@ -20,6 +20,8 @@ on:
       - "tools/generate_lsl_tables.py"
       - "codegen/inputs/lsl_tools_grammar.json"
       - "docs/extension-milestone-gate.md"
+      - "docs/live-grid-smoke.md"
+      - "programs/README.md"
       - "api/SHIM-COVERAGE.md"
       - "**/*.rs"
       - "**/Cargo.toml"
@@ -43,6 +45,8 @@ on:
       - "tools/generate_lsl_tables.py"
       - "codegen/inputs/lsl_tools_grammar.json"
       - "docs/extension-milestone-gate.md"
+      - "docs/live-grid-smoke.md"
+      - "programs/README.md"
       - "api/SHIM-COVERAGE.md"
       - "**/*.rs"
       - "**/Cargo.toml"
@@ -99,6 +103,10 @@ jobs:
         run: python3 tools/test_milestone_10.py
       - name: Compile every workspace target with bounded memory
         run: cargo check --workspace --all-targets --locked -j 1
+      - name: Audit and fake-smoke every native program target
+        run: |
+          cargo run -p libremetaverse-programs --bin live-grid-smoke --locked -- --audit-only
+          cargo test -p libremetaverse-programs --test live_grid_smoke_cli --locked -j 1
       - name: Check optional cross-platform real audio backend
         run: |
           cargo check -p libremetaverse-voice-webrtc --all-targets --features real-audio --locked -j 1