The actions dtolnay/rust-toolchain@nightly, taiki-e/install-action@just, taiki-e/install-action@cargo-llvm-cov, swatinem/rust-cache@v2, and codecov/codecov-action@v6 are not allowed in BuildMonumental/wasm-bindgen because all actions must be from a repository owned by BuildMonumental, created by GitHub, or match one of the patterns: NixOS/nix-installer-action@*, anthropics/claude-code-action@*, astral-sh/setup-uv@*, aws-actions/configure-aws-credentials@*, dorny/paths-filter@*, opentofu/setup-opentofu@*, oven-sh/setup-bun@*, ravsamhq/notify-slack-action@*, stefanzweifel/git-auto-commit-action@*, tailscale/*.