config: Implement secure-config design doc. #8061

Job	Run time
build (no git)	1m 29s
check (protos)	38s
nix flake (macos-14)	9m 31s
nix flake (ubuntu-24.04)	7m 53s
test (linux-aarch64-gnu)	6m 0s
nix flake (ubuntu-24.04-arm)	8m 55s
test (linux-x86_64-gnu)	6m 5s
test (macos-x86_64)	15m 32s
test (windows-aarch64)	14m 39s
test (macos-aarch64)	8m 35s
test (windows-x86_64)	14m 38s
check (clippy)	1m 29s
check (latest mkdocs, optional)	16s
check (Cargo.lock dependency count)	5s
check (cargo-deny, bans)	28s
check (cargo-deny, advisories)	27s
check (cargo-deny, licenses)	26s
check (codespell)	12s
check (mkdocs)	15s
check (cargo-deny, sources)	23s
check (rustfmt)	27s
check (doctests)	3m 4s
check (zizmor)	15s
required checks (merge queue)	0s
	1h 41m 42s

Provide feedback