feat: harden community production foundation through story 1.5

Cargo.lock

@@ -27,6 +27,7 @@ dependencies = [
  "axum-extra",
  "base64",
  "crank-community-auth",
+ "crank-config",
  "crank-core",
  "crank-import",
  "crank-mapping",
@@ -576,15 +577,6 @@ dependencies = [
  "tokio-util",
 ]
 
-[[package]]
-name = "concurrent-queue"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973"
-dependencies = [
- "crossbeam-utils",
-]
-
 [[package]]
 name = "cookie"
 version = "0.18.1"
@@ -723,6 +715,16 @@ dependencies = [
  "uuid",
 ]
 
+[[package]]
+name = "crank-config"
+version = "0.3.1"
+dependencies = [
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+ "url",
+]
+
 [[package]]
 name = "crank-core"
 version = "0.3.1"
@@ -734,6 +736,7 @@ dependencies = [
  "thiserror 2.0.18",
  "time",
  "tokio",
+ "uuid",
 ]
 
 [[package]]
@@ -795,7 +798,6 @@ dependencies = [
  "tracing-opentelemetry",
  "tracing-subscriber",
  "url",
- "uuid",
 ]
 
 [[package]]
@@ -874,7 +876,10 @@ dependencies = [
 name = "crank-trace"
 version = "0.3.1"
 dependencies = [
+ "crank-core",
+ "opentelemetry",
  "tracing",
+ "tracing-opentelemetry",
  "tracing-subscriber",
 ]
 
@@ -1122,11 +1127,10 @@ dependencies = [
 
 [[package]]
 name = "event-listener"
-version = "5.4.1"
+version = "5.4.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e13b66accf52311f30a0db42147dadea9850cb48cd070028831ae5f5d4b856ab"
+checksum = "5a23add41df1562121a9393cb065eab5146a1242410f23a644851e90cfd669d2"
 dependencies = [
- "concurrent-queue",
  "parking",
  "pin-project-lite",
 ]
@@ -2019,6 +2023,7 @@ dependencies = [
  "axum",
  "base64",
  "crank-community-mcp",
+ "crank-config",
  "crank-core",
  "crank-mapping",
  "crank-observability",