[fork] ci: Waive the smallstr unmaintained advisory.

The inline string types choose their own inline budget, which both
alternatives the advisory recommends fix at the width of a String, so
smallstr stays and cargo-deny gets a config that passes over it.

Signed-off-by: Jason Volk <jason@zemos.net>

Author: jevolk

deny.toml

@@ -0,0 +1,10 @@
+# Configuration for cargo-deny, run by the Dependencies workflow.
+
+[advisories]
+ignore = [
+    # smallstr is unmaintained, with no vulnerability and no safe upgrade. The fork's inline
+    # string types (StateKey, EventTypeString) pick their own inline budget, which neither
+    # recommended alternative offers: compact_str and smol_str both fix the inline capacity at
+    # the width of a String.
+    { id = "RUSTSEC-2026-0215", reason = "smallstr is unmaintained, not vulnerable, and the alternatives fix the inline capacity we choose per type" },
+]