refactor: consolidate #![allow(clippy::cast_*)] to crate roots

Add the cast-allow block to zesdex-entities/src/lib.rs and
zesdex-utils/src/lib.rs (which lacked it), then remove from
65 sub-files across all 8 crates. Build and all 223 tests
continue to pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

crates/zesdex-iam/src/application/oauth_service.rs

@@ -1,9 +1,3 @@
-#![allow(
-    clippy::cast_possible_truncation,
-    clippy::cast_sign_loss,
-    clippy::cast_precision_loss,
-    clippy::cast_possible_wrap
-)]
 //! OAuth flow use-cases.
 //!
 //! `OAuthServiceImpl` drives the authorization-code + PKCE flow:

crates/zesdex-iam/src/application/session_service.rs

@@ -1,9 +1,3 @@
-#![allow(
-    clippy::cast_possible_truncation,
-    clippy::cast_sign_loss,
-    clippy::cast_precision_loss,
-    clippy::cast_possible_wrap
-)]
 //! Session management use-cases.
 //!
 //! `SessionServiceImpl` implements `SessionService` by delegating to

crates/zesdex-iam/src/domain/oauth.rs

@@ -1,9 +1,3 @@
-#![allow(
-    clippy::cast_possible_truncation,
-    clippy::cast_sign_loss,
-    clippy::cast_precision_loss,
-    clippy::cast_possible_wrap
-)]
 //! Pure OAuth entities — no HTTP or persistence logic.
 use serde::{Deserialize, Serialize};
 

crates/zesdex-iam/src/domain/repository.rs

@@ -1,9 +1,3 @@
-#![allow(
-    clippy::cast_possible_truncation,
-    clippy::cast_sign_loss,
-    clippy::cast_precision_loss,
-    clippy::cast_possible_wrap
-)]
 //! Repository trait definitions (pure — no impls, no concrete persistence).
 use std::path::Path;
 

crates/zesdex-iam/src/domain/service.rs

@@ -1,9 +1,3 @@
-#![allow(
-    clippy::cast_possible_truncation,
-    clippy::cast_sign_loss,
-    clippy::cast_precision_loss,
-    clippy::cast_possible_wrap
-)]
 //! Service trait definitions — use-case interfaces for session management
 //! and OAuth flows.
 use crate::domain::oauth::{OAuthConfig, OAuthToken};

crates/zesdex-iam/src/infrastructure/http/dto.rs

@@ -1,9 +1,3 @@
-#![allow(
-    clippy::cast_possible_truncation,
-    clippy::cast_sign_loss,
-    clippy::cast_precision_loss,
-    clippy::cast_possible_wrap
-)]
 //! IAM-specific HTTP / IPC DTOs (Data Transfer Objects).
 use serde::{Deserialize, Serialize};
 

crates/zesdex-iam/src/infrastructure/http/handlers.rs

@@ -1,9 +1,3 @@
-#![allow(
-    clippy::cast_possible_truncation,
-    clippy::cast_sign_loss,
-    clippy::cast_precision_loss,
-    clippy::cast_possible_wrap
-)]
 //! IPC / HTTP handler functions.
 //!
 //! Each handler is a plain function that takes a service reference and a

crates/zesdex-iam/src/infrastructure/oauth_loopback.rs

@@ -1,9 +1,3 @@
-#![allow(
-    clippy::cast_possible_truncation,
-    clippy::cast_sign_loss,
-    clippy::cast_precision_loss,
-    clippy::cast_possible_wrap
-)]
 //! Minimal loopback HTTP server for capturing OAuth authorization-code redirects.
 //!
 //! Ported from `zesdex-backend::service::oauth::loopback` to centralise OAuth

crates/zesdex-iam/src/infrastructure/persistence/oauth_repo.rs

@@ -1,9 +1,3 @@
-#![allow(
-    clippy::cast_possible_truncation,
-    clippy::cast_sign_loss,
-    clippy::cast_precision_loss,
-    clippy::cast_possible_wrap
-)]
 //! Filesystem-backed `OAuthRepository` implementation.
 //!
 //! Tokens are stored as a single JSON file. Writes use a write-then-rename

crates/zesdex-iam/src/infrastructure/persistence/session_repo.rs

@@ -1,9 +1,3 @@
-#![allow(
-    clippy::cast_possible_truncation,
-    clippy::cast_sign_loss,
-    clippy::cast_precision_loss,
-    clippy::cast_possible_wrap
-)]
 //! Filesystem-backed `SessionRepository` implementation.
 //!
 //! Each session is stored as `<base_dir>/sessions/<id>/session.json`.