[egorsmkv]

The Windows, Ubuntu and macOS jobs in Tests run 37614774740 fail before running tests: pysentry 0.4.9 adds VulnerabilityMatch::source_file, but the DTO mapping test fixture omits it. Set it to None because this fixture has no dependency-file origin.

Run the existing full workspace test matrix on pull requests changing Rust manifests, crates, bundled signatures or the test workflow, so dependency API changes are checked before merge. Preserve the manual trigger and read-only permissions.

Validation:

• Local domain, application and infrastructure suites: 219 passed, 1 ignored, including the PySentry DTO mapping regression. All targets tested with Python AST audit, SQLite, PostgreSQL, SQL Server, S3, source security, vulnerability DB and YARA enabled; ML file classification excluded.
• cargo fmt --all -- --check and git diff --check pass.
• The full-feature Windows/Linux/macOS CI matrix passes on all three platforms. Ubuntu reports 331 passed, 1 ignored. Bundled YARA, Fuzz and both profiling modes also pass.
• The exact full workspace command could not build locally because ONNX Runtime's CDN is blocked in this environment; full-feature validation was completed by GitHub Actions.

Local test command:

cargo test -p pyregistry-domain -p pyregistry-application -p pyregistry-infrastructure --all-targets --locked --no-default-features --features pyregistry-application/python-ast-audit,pyregistry-infrastructure/sqlite,pyregistry-infrastructure/postgres,pyregistry-infrastructure/sqlserver,pyregistry-infrastructure/s3,pyregistry-infrastructure/source-security,pyregistry-infrastructure/vulnerability-db,pyregistry-infrastructure/virus-yara