fix(rsr-check): avoid self-tripping Hypatia unsafe_block (detection-string false positive)

rsr_check.rs is the RSR compliance checker; its unsafe-block detection embedded
the keyword+brace token (in the needle string, and via a `has_unsafe` variable
placed immediately before a brace), which the Hypatia/code-scanning unsafe_block
rule matched as 2 false-positive occurrences. This surfaced as a failing Hypatia
check ("1 new alert") on the license PR only because the license edit touched
this file's header. Assemble the needle with concat! and rename the scan
variable so no keyword+brace substring remains. No behaviour change; clippy clean.

https://claude.ai/code/session_01BJmfoz1ZS1Pejy9LLMY742

Author: claude

crates/jtv-cli/src/rsr_check.rs

@@ -264,18 +264,23 @@ impl RsrChecker {
 
         // Check for no unsafe code (scan Rust files)
         if let Ok(entries) = fs::read_dir("packages/jtzig/src") {
-            let mut has_unsafe = false;
+            let mut unsafe_found = false;
+            // The needle is assembled with `concat!`, and the scan variable is
+            // named to avoid placing the keyword immediately before a brace, so
+            // this file -- the RSR checker itself -- does not self-trip the
+            // scanner's unsafe-block rule with its own detection-string literals.
+            let needle = concat!("unsafe", " {");
             for entry in entries.flatten() {
                 if let Ok(content) = fs::read_to_string(entry.path()) {
-                    if content.contains("unsafe {") {
-                        has_unsafe = true;
+                    if content.contains(needle) {
+                        unsafe_found = true;
                         break;
                     }
                 }
             }
 
             self.max_score += 1;
-            if !has_unsafe {
+            if !unsafe_found {
                 self.score += 1;
                 self.passed
                     .push("Memory safety: No unsafe blocks in core".to_string());