Catch Rust safety issues in workerd code

Reviews Rust code for unsafe patterns, CXX FFI correctness, JSG resource leaks, and error handling. Runs through a domain-specific checklist tuned for workerd's C++ interop.

Best for: Engineers reviewing PRs that touch src/rust/ or call unsafe C++ from Rust.