ci(deny): move exclude-dev to config for cargo-deny 0.20

cargo-deny 0.20 removed the --exclude-dev CLI flag; the equivalent
setting must now be configured in deny.toml.

Author: farhan-syah

.github/workflows/test.yml

@@ -59,7 +59,7 @@ jobs:
         with:
           tool: cargo-deny
       - name: Dependency audit
-        run: cargo deny check --exclude-dev
+        run: cargo deny check
 
   # Single test job: runs the fast suite first, then the 3-node cluster
   # suite (`nodedb-cluster-tests`) on the same runner. Combining them

deny.toml

@@ -11,6 +11,9 @@
 
 [graph]
 all-features = true
+# Exclude dev-dependencies from the crate graph (the `check` CLI flag
+# `--exclude-dev` was removed in cargo-deny 0.20; it is config-only now).
+exclude-dev = true
 
 [advisories]
 version = 2