ci: reduce Docker Hub rate limit pressure

[agentotto]

Summary

This PR removes the remaining Docker Hub dependency in CI by avoiding the Docker-based cargo-deny action. There were no explicit in-repo docker.io/library/* image references left to remap to ECR Public in this repo.

Why this approach

• No Docker Hub login is needed.
• cargo-deny runs natively instead of through a Docker-based action that pulls rust from Docker Hub.
• The temporary Docker Hub login workaround in the Android release workflow was also removed/reset.

What was pushed successfully

• .github/workflows/release-swift-kotlin.yml was updated/reset so it no longer contains the temporary Docker Hub login workaround.
• the existing branch note file remains on branch so the PR stays openable with this token.

What could not be pushed by this GitHub App token

• .github/workflows/ci.yml (403: missing workflows permission)

The full intended patch is included verbatim below so the remaining workflow change can be applied manually if needed.

Full patch

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1c26ca2..ae087e0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -189,10 +189,13 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v6
 
-      - uses: EmbarkStudios/cargo-deny-action@v2
+      - name: Install cargo-deny
+        uses: taiki-e/install-action@e24b8b7a939c6a537188f34a4163cb153dd85cf6 # v2.69.1 https://github.com/taiki-e/install-action/releases/tag/v2.69.1
         with:
-          command: check ${{ matrix.checks }}
-          rust-version: 1.92.0
+          tool: cargo-deny
+
+      - name: Run cargo deny
+        run: cargo deny check ${{ matrix.checks }}
 
   docs:
     name: Check docs

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit f68cf0c. Configure here.}

[cursor]

Placeholder note committed to repository root

Low Severity

otto-docker-rate-limit-notes.md is a temporary process artifact placed at the repository root solely to enable opening a PR. It contains no project documentation — only internal notes about token permissions. This file will linger in the repo after the PR is merged and has no long-term value; it looks like it was meant to be removed before merge.

 

^{Reviewed by Cursor Bugbot for commit f68cf0c. Configure here.}