fix(ci): ignore yanked arrayref required by schnorrkel

[echobt]

Summary

• cargo deny fails on main because arrayref 0.3.7–0.3.9 are yanked and schnorrkel 0.11.5 cannot move.
• Ignore arrayref@0.3.9 and trigger the images pin ladder on deny.toml so we can tag prod after fix(validator): persist last sealed bundle across restarts #180.

Test plan

• CI cargo-deny green
• staging pins commit_sha matches this merge
• tag v3.3.26 → deploy-prod

[coderabbitai]

Warning

Review limit reached

@echobt, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 45 minutes

Limit details: You’ve used all 2 included reviews currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

How can I continue?

Wait for the limit to reset, then comment @coderabbitai review or push new commits to the PR.

An organization admin can change what happens after included review limits in Billing.

How do review limits work?

CodeRabbit enforces per-developer PR review limits within each organization.

For paid Pro and Pro+ reviews, CodeRabbit uses a developer's included PR review attempts over the past 7 days to set the current hourly allowance. At typical activity levels, the full plan allowance applies. Higher sustained activity can lower the allowance until earlier attempts leave the 7-day window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 57731c42-733b-4f03-a822-fd7e72984ded

📥 Commits

Reviewing files that changed from the base of the PR and between 8a8122c and 7e85637.

📒 Files selected for processing (2)

• .github/workflows/images.yml
• deny.toml

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}