ci: implement integration testing infrastructure with mysql containers (#103)

This pull request introduces several improvements focused on code style
enforcement, editor configuration, and workflow automation, as well as
some documentation and template updates. The most important changes are
grouped below by theme.

**Editor and Code Style Enforcement**

* Added `.editorconfig` and `.editorconfig-checker.json` files with
comprehensive formatting rules for all major file types, ensuring
consistent code style and formatting across the project. This includes
specific settings for Rust, Markdown, TOML, YAML, JSON, shell scripts,
and a default fallback for other files. (`.editorconfig`,
`.editorconfig-checker.json`)
[[1]](diffhunk://#diff-0947e2727d6bad8cd0ac4122f5314bb5b04e337393075bc4b5ef143b17fcbd5bL6-R58)
[[2]](diffhunk://#diff-ffc189b5d4f8c2eb9a171e067565fbfe9ecba9a5b717d236cbf22497973fc4a3R1-R20)
* Introduced a detailed `.cursor/settings.json` for VSCode, specifying
formatter preferences, tab widths, word wrap, and rulers for each
language, further standardizing the development environment.

**Automation and CI/CD Workflows**

* Added a new `autofix.ci` workflow (`.github/workflows/autofix.yml`)
that automatically applies code formatting and linting fixes using Rust
tools and pre-commit hooks on pull requests and pushes to `main`.
* Updated all GitHub Actions workflows to use
`taiki-e/checkout-action@v1` instead of the default `actions/checkout`,
improving reliability and security.
[[1]](diffhunk://#diff-93a89f16f6717d1e4e4e27ec20ef916e3355c7aa890ca74cd9b12db30d8a899fL25-R25)
[[2]](diffhunk://#diff-b803fcb7f17ed9235f1e5cb1fcd2f5d3b2838429d4368ae4c57ce4436577f03fL53-R53)
[[3]](diffhunk://#diff-b803fcb7f17ed9235f1e5cb1fcd2f5d3b2838429d4368ae4c57ce4436577f03fL123-R123)
[[4]](diffhunk://#diff-b803fcb7f17ed9235f1e5cb1fcd2f5d3b2838429d4368ae4c57ce4436577f03fL165-R165)
[[5]](diffhunk://#diff-b803fcb7f17ed9235f1e5cb1fcd2f5d3b2838429d4368ae4c57ce4436577f03fL233-R233)

**Secret Scanning and Security**

* Added a `.checkov.yml` configuration to enable secret scanning,
variable evaluation, and enforcement rules for infrastructure code, with
custom settings for output and check skipping.

**Documentation and Template Formatting**

* Improved formatting and readability in markdown documentation and
GitHub templates, including line wrapping for better accessibility and
clarity. This affects issue templates, pull request templates, Copilot
instructions, and changelog templates.
[[1]](diffhunk://#diff-c25d576890a32eb1483dee2edf4fdc1529816b846bf76ef565f577cb433c1f79L15-R17)
[[2]](diffhunk://#diff-c25d576890a32eb1483dee2edf4fdc1529816b846bf76ef565f577cb433c1f79L54-R57)
[[3]](diffhunk://#diff-185833cb26d7ac66a4d39042fd576a820c2c2c6d05ad18973bb9c7dce77267c5L23-R25)
[[4]](diffhunk://#diff-b2496e80299b8c3150b1944450bd81c622e04e13d15c411d291db0927d75fd6bL9-R10)
[[5]](diffhunk://#diff-b2496e80299b8c3150b1944450bd81c622e04e13d15c411d291db0927d75fd6bL65-R67)
[[6]](diffhunk://#diff-227c2c26cb2ee0ce0f46a320fc48fbcbdf21801a57f59161b1d0861e8aad55f5L5-R19)
[[7]](diffhunk://#diff-227c2c26cb2ee0ce0f46a320fc48fbcbdf21801a57f59161b1d0861e8aad55f5L91-R101)
[[8]](diffhunk://#diff-227c2c26cb2ee0ce0f46a320fc48fbcbdf21801a57f59161b1d0861e8aad55f5L130-R138)
[[9]](diffhunk://#diff-227c2c26cb2ee0ce0f46a320fc48fbcbdf21801a57f59161b1d0861e8aad55f5L163-R172)
[[10]](diffhunk://#diff-227c2c26cb2ee0ce0f46a320fc48fbcbdf21801a57f59161b1d0861e8aad55f5R227-R241)
[[11]](diffhunk://#diff-1f80ea1bb3b2ccb8356b3987ebb6c63076d206eacdb50de5a6d7b0027106841cR3-R12)
[[12]](diffhunk://#diff-1f80ea1bb3b2ccb8356b3987ebb6c63076d206eacdb50de5a6d7b0027106841cR21-R58)

**Rust Best Practices**

* Updated Rust best practices documentation to include maximum file
length guidelines, a recommendation to use external tools for crate
documentation, and improved code sample formatting.
[[1]](diffhunk://#diff-89ba100ca0e07303f5e83a34ce056cfc147deefd18b7847b399b5dfb6e1ca906R6)
[[2]](diffhunk://#diff-89ba100ca0e07303f5e83a34ce056cfc147deefd18b7847b399b5dfb6e1ca906R52)
[[3]](diffhunk://#diff-89ba100ca0e07303f5e83a34ce056cfc147deefd18b7847b399b5dfb6e1ca906L74-R76)
[[4]](diffhunk://#diff-89ba100ca0e07303f5e83a34ce056cfc147deefd18b7847b399b5dfb6e1ca906L92-R94)
[[5]](diffhunk://#diff-89ba100ca0e07303f5e83a34ce056cfc147deefd18b7847b399b5dfb6e1ca906R113)

These changes collectively improve code quality, enforce consistent
style, automate maintenance tasks, and enhance documentation for both
contributors and reviewers.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- New Features
- Added a “Manual Checks” action to run full project checks
interactively until all pass (formatting, linting, tests, coverage,
security, pre-commit hooks).

- Chores
  - Removed the legacy “Manual CI Check” action.

- Documentation
- Clarified docs sync guidance to explicitly update files in /docs and
maintain an end‑user manual tone.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Author: unclesp1d3r

.checkov.yml

@@ -0,0 +1,21 @@
+block-list-secret-scan: []
+branch: master
+custom-tool-name: Checkov
+directory:
+  - .
+evaluate-variables: true
+external-modules-download-path: .external_modules
+hard-fail-on:
+  - MEDIUM
+mask: []
+output:
+  - github_failed_only
+quiet: true
+secrets-history-timeout: 12h
+secrets-scan-file-type: []
+skip-check:
+  - CKV_DOCKER_2
+soft-fail-on:
+  - LOW
+summary-position: top
+use-enforcement-rules: true

.chglog/CHANGELOG.tpl.md

@@ -1,11 +1,15 @@
 {{ if .Versions -}}
 <a name="unreleased"></a>
+
 ## [Unreleased]
 
 {{ if .Unreleased.CommitGroups -}}
 {{ range .Unreleased.CommitGroups -}}
+
 ### {{ .Title }}
+
 {{ range .Commits -}}
+
 - {{ if .Scope }}**{{ .Scope }}:** {{ end }}{{ .Subject }}
 {{ end }}
 {{ end -}}
@@ -14,31 +18,44 @@
 
 {{ range .Versions }}
 <a name="{{ .Tag.Name }}"></a>
+
 ## {{ if .Tag.Previous }}[{{ .Tag.Name }}]{{ else }}{{ .Tag.Name }}{{ end }} - {{ datetime "2006-01-02" .Tag.Date }}
+
 {{ range .CommitGroups -}}
+
 ### {{ .Title }}
+
 {{ range .Commits -}}
+
 - {{ if .Scope }}**{{ .Scope }}:** {{ end }}{{ .Subject }}
 {{ end }}
 {{ end -}}
 
 {{- if .RevertCommits -}}
+
 ### Reverts
+
 {{ range .RevertCommits -}}
+
 - {{ .Revert.Header }}
 {{ end }}
 {{ end -}}
 
 {{- if .MergeCommits -}}
+
 ### Pull Requests
+
 {{ range .MergeCommits -}}
+
 - {{ .Header }}
 {{ end }}
 {{ end -}}
 
 {{- if .NoteGroups -}}
 {{ range .NoteGroups -}}
+
 ### {{ .Title }}
+
 {{ range .Notes }}
 {{ .Body }}
 {{ end }}

.github/.coderabbit.yaml .coderabbit.yaml.github/.coderabbit.yaml renamed to .coderabbit.yaml

@@ -3,6 +3,7 @@ description:
 globs:
 alwaysApply: true
 ---
+
 # Rust Best Practices for gold_digger
 
 ## Project Structure
@@ -48,6 +49,7 @@ This zero-copy API accepts:
 - **Clippy warnings**: Zero tolerance (`-D warnings`)
 - **Error handling**: Use `anyhow` for applications, `thiserror` for libraries
 - **Documentation**: Doc comments (`///`) required for all public functions
+- **Code length**: Rust files should be no longer than 1000 lines of code, and no more than 500 lines of code, if possible.
 
 ### Essential Commands
 
@@ -71,7 +73,7 @@ just security     # cargo audit (advisory)
 
 Required for all public functions using `///`:
 
-```rust
+````rust
 /// Converts MySQL rows to string vectors for output formatting.
 ///
 /// # Arguments
@@ -89,7 +91,7 @@ Required for all public functions using `///`:
 pub fn rows_to_strings(rows: Vec<mysql::Row>) -> anyhow::Result<Vec<Vec<String>>> {
     // Implementation
 }
-```
+````
 
 ## Code Style
 
@@ -108,6 +110,7 @@ pub fn rows_to_strings(rows: Vec<mysql::Row>) -> anyhow::Result<Vec<Vec<String>>
 
 - Pin dependency versions in [`Cargo.toml`](mdc:Cargo.toml) and use minimal required features for each crate
 - Use optional dependencies and features for extensibility (e.g., additional MySQL types, output formats)
+- Use context7 website or MCP tool to get current documentation for APIs and crates
 
 ## Testing Guidelines
 

.cursor/rules/rust-best-practices.mdc

@@ -0,0 +1,81 @@
+{
+  "prettier.configPath": ".prettierrc.json",
+  "prettier.requireConfig": true,
+  "prettier.useEditorConfig": false,
+  "editor.formatOnSave": true,
+  "editor.defaultFormatter": "esbenp.prettier-vscode",
+  "editor.rulers": [100],
+  "editor.wordWrap": "wordWrapColumn",
+  "editor.wordWrapColumn": 100,
+  "[json]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.tabSize": 2,
+    "editor.insertSpaces": true,
+    "prettier.tabWidth": 2
+  },
+  "[jsonc]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.tabSize": 2,
+    "editor.insertSpaces": true,
+    "prettier.tabWidth": 2
+  },
+  "[yaml]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.tabSize": 2,
+    "editor.insertSpaces": true,
+    "prettier.tabWidth": 2
+  },
+  "[yml]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.tabSize": 2,
+    "editor.insertSpaces": true,
+    "prettier.tabWidth": 2
+  },
+  "[rust]": {
+    "editor.defaultFormatter": "rust-lang.rust-analyzer",
+    "editor.tabSize": 4,
+    "editor.insertSpaces": true
+  },
+  "[toml]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.tabSize": 4,
+    "editor.insertSpaces": true,
+    "prettier.tabWidth": 4
+  },
+  "[markdown]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.tabSize": 2,
+    "editor.insertSpaces": true,
+    "prettier.tabWidth": 2,
+    "prettier.proseWrap": "always",
+    "editor.wordWrap": "on",
+    "editor.rulers": [100]
+  },
+  "oxc.enable": true,
+  "oxc.format.enable": false,
+  "oxc.configPath": ".oxlintrc.json",
+  "[javascript]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.tabSize": 2,
+    "editor.insertSpaces": true,
+    "prettier.tabWidth": 2
+  },
+  "[typescript]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.tabSize": 2,
+    "editor.insertSpaces": true,
+    "prettier.tabWidth": 2
+  },
+  "[javascriptreact]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.tabSize": 2,
+    "editor.insertSpaces": true,
+    "prettier.tabWidth": 2
+  },
+  "[typescriptreact]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.tabSize": 2,
+    "editor.insertSpaces": true,
+    "prettier.tabWidth": 2
+  }
+}

.cursor/settings.json

@@ -3,36 +3,56 @@
 # top-most EditorConfig file
 root = true
 
-# Unix-style newlines with a newline ending every file
-[*]
-charset = utf-8
-end_of_line = lf
-insert_final_newline = true
-trim_trailing_whitespace = true
-indent_style = space
-indent_size = 4
-# Note: max_line_length is not reliably supported by all editors
-# Use language-specific formatters instead:
-# - Rust: rustfmt.toml (max_width = 119)
-# - Markdown: .markdownlint-cli2.jsonc (MD013 disabled)
-# - YAML/JSON: Respect indent_size settings below
-
 # Rust files
 [*.rs]
 indent_size = 4
+indent_style = space
+end_of_line = lf
+charset = utf-8
+insert_final_newline = true
+trim_trailing_whitespace = true
 
 # TOML files
 [*.toml]
 indent_size = 4
+indent_style = space
+end_of_line = lf
+charset = utf-8
+insert_final_newline = true
+trim_trailing_whitespace = true
 
 # Markdown files
 [*.md]
+indent_size = 2
+indent_style = space
+end_of_line = lf
+charset = utf-8
+insert_final_newline = true
 trim_trailing_whitespace = false
 
-# YAML files
-[*.{yml,yaml}]
+# JSON, YAML, and JSONC files
+[*.json,*.jsonc,*.yml,*.yaml]
 indent_size = 2
+indent_style = space
+end_of_line = lf
+charset = utf-8
+insert_final_newline = true
+trim_trailing_whitespace = true
 
-# JSON files
-[*.json]
+# Shell scripts
+[*.sh,*.bash,*.zsh]
 indent_size = 2
+indent_style = space
+end_of_line = lf
+charset = utf-8
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+# Default settings for all other files
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = space
+indent_size = 4

.editorconfig

@@ -0,0 +1,20 @@
+{
+  "Version": "v3.3.0",
+  "Verbose": false,
+  "Format": "",
+  "Debug": false,
+  "IgnoreDefaults": false,
+  "SpacesAfterTabs": false,
+  "NoColor": false,
+  "Exclude": [],
+  "AllowedContentTypes": [],
+  "PassedFiles": [],
+  "Disable": {
+    "EndOfLine": false,
+    "Indentation": true,
+    "InsertFinalNewline": false,
+    "TrimTrailingWhitespace": false,
+    "IndentSize": true,
+    "MaxLineLength": false
+  }
+}

.editorconfig-checker.json

@@ -12,7 +12,9 @@ A clear and concise description of the issue.
    export DATABASE_QUERY="..."
    ```
 
-   ⚠️ Security Note: Before posting this issue, please redact or obfuscate any sensitive credentials in your DATABASE_URL. Replace usernames, passwords, and hostnames with `[REDACTED]` or use a sanitized example like mysql://user:pass@host:3306/db.
+   ⚠️ Security Note: Before posting this issue, please redact or obfuscate any sensitive credentials
+   in your DATABASE_URL. Replace usernames, passwords, and hostnames with `[REDACTED]` or use a
+   sanitized example like mysql://user:pass@host:3306/db.
 
 2. Run the command:
 
@@ -51,4 +53,5 @@ Please select the appropriate template for your issue:
 
 ---
 
-**Note**: This is a single-maintainer project. Please be patient with response times and provide as much detail as possible to help with issue resolution.
+**Note**: This is a single-maintainer project. Please be patient with response times and provide as
+much detail as possible to help with issue resolution.

.github/ISSUE_TEMPLATE.md

@@ -20,7 +20,9 @@ A clear and concise description of what the bug is.
    export DATABASE_QUERY="..."
    ```
 
-   **⚠️ Security Note**: Before posting this issue, please redact or obfuscate any sensitive credentials in your DATABASE_URL. Replace usernames, passwords, and hostnames with `<redacted>` or use a sanitized example like `mysql://user:pass@host:3306/db`.
+   **⚠️ Security Note**: Before posting this issue, please redact or obfuscate any sensitive
+   credentials in your DATABASE_URL. Replace usernames, passwords, and hostnames with `<redacted>`
+   or use a sanitized example like `mysql://user:pass@host:3306/db`.
 
 2. Run the command: