fix clippy errors in fspy_shared_unix and restore generated_bindings.rs

- Add SAFETY comment and doc sections for fspy_shared_unix Linux code
- Fix useless as_ref() in elf.rs, derivable_impls in shebang.rs
- Suppress struct_field_names for seccomp_payload field
- Restore original individual use statements in generated_bindings.rs
  to match bindgen test expectations

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: wan9chi

crates/fspy_shared_unix/src/elf.rs

@@ -7,6 +7,11 @@ use std::{
 use bstr::BStr;
 use elf::{ElfBytes, abi::PT_INTERP, endian::AnyEndian};
 
+/// Checks whether the given ELF executable is dynamically linked to libc.
+///
+/// # Errors
+///
+/// Returns `ENOEXEC` if the binary cannot be parsed as a valid ELF file.
 pub fn is_dynamically_linked_to_libc(executable: impl AsRef<[u8]>) -> nix::Result<bool> {
     let executable = executable.as_ref();
     let Some(interp) = get_interp(executable)? else {
@@ -20,8 +25,8 @@ pub fn is_dynamically_linked_to_libc(executable: impl AsRef<[u8]>) -> nix::Resul
 }
 
 fn get_interp(executable: &[u8]) -> nix::Result<Option<&BStr>> {
-    let elf = ElfBytes::<'_, AnyEndian>::minimal_parse(executable.as_ref())
-        .map_err(|_| nix::Error::ENOEXEC)?;
+    let elf =
+        ElfBytes::<'_, AnyEndian>::minimal_parse(executable).map_err(|_| nix::Error::ENOEXEC)?;
     let Some(headers) = elf.segments() else {
         return Ok(None);
     };

crates/fspy_shared_unix/src/exec/shebang.rs

@@ -17,6 +17,10 @@ pub struct ParseShebangOptions {
     pub split_arguments: bool, // TODO: recursive
 }
 
+#[expect(
+    clippy::derivable_impls,
+    reason = "on macOS split_arguments defaults to true via cfg!, which is not derivable"
+)]
 impl Default for ParseShebangOptions {
     fn default() -> Self {
         Self { split_arguments: cfg!(target_vendor = "apple") }

crates/fspy_shared_unix/src/payload.rs

@@ -15,6 +15,7 @@ pub struct Payload {
     pub artifacts: Artifacts,
 
     #[cfg(target_os = "linux")]
+    #[expect(clippy::struct_field_names, reason = "descriptive field name for clarity")]
     pub seccomp_payload: fspy_seccomp_unotify::payload::SeccompPayload,
 }
 

crates/fspy_shared_unix/src/spawn/linux/mod.rs

@@ -14,6 +14,11 @@ const LD_PRELOAD: &str = "LD_PRELOAD";
 
 pub struct PreExec(SeccompPayload);
 impl PreExec {
+    /// Installs the seccomp unotify filter for the current process.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error if the seccomp filter installation fails.
     pub fn run(&self) -> nix::Result<()> {
         install_target(&self.0)
     }
@@ -24,6 +29,7 @@ pub fn handle_exec(
     encoded_payload: &EncodedPayload,
 ) -> nix::Result<Option<PreExec>> {
     let executable_fd = open_executable(Path::new(OsStr::from_bytes(&command.program)))?;
+    // SAFETY: The file descriptor is valid and we only read from the mapping.
     let executable_mmap = unsafe { Mmap::map(&executable_fd) }
         .map_err(|io_error| nix::Error::try_from(io_error).unwrap_or(nix::Error::UnknownErrno))?;
     if elf::is_dynamically_linked_to_libc(executable_mmap)? {