chore(ci): prepare fixed Doppler secret import

[P4suta]

Transfer the repository's existing GitHub credential fields into the prepared Doppler source config using a temporary, fixed-target Rust workflow.
The manual job binds the repository ID, Git ref, destination config, and selected fields at build time.
It builds before credentials are injected, preserves existing Doppler values, and compares the transferred values privately without printing them or uploading credential artifacts.

The migration authorization is config-scoped, expires after one hour, and is revoked after the job.
Existing environment reviewers remain enforced.
The temporary workflow and crate will be removed after the native Doppler sync is verified.

Validation: repository-specific Rust formatting and Clippy with warnings denied, seven credential-free unit tests, and native Linux and Windows tests through domyjob.
The PR also checks the transfer crate on Linux, macOS, and Windows.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: da43b365-184a-4d23-840d-d405ff8491d4

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}