Integrate the ignored-workspace corpus into verification

Give the Git Sentry launch shape one Rust owner, update the physical corpus to supply every authority, and make the default repository gate distinguish unavailable physical prerequisites from corpus failures.

tools/lazaret_verify.py

@@ -618,6 +618,27 @@ def run_rust_tests() -> None:
     run(list(DOCTEST_COMMAND))
 
 
+def run_ignored_workspace_corpus(metadata: dict) -> None:
+    binaries = build_workspace_binaries(metadata)
+    with tempfile.TemporaryDirectory(prefix="lazaret-ignored-workspace-corpus-") as directory:
+        root = Path(directory)
+        run_physical(
+            [
+                sys.executable,
+                str(ROOT / "tools/ignored_workspace_verifier.py"),
+                "corpus",
+                "--router",
+                str(binaries["lazaret-ignored-workspace"]),
+                "--git-sentry",
+                str(binaries["lazaret-git-sentry"]),
+                "--work-root",
+                str(root / "work"),
+                "--output",
+                str(root / "result.json"),
+            ]
+        )
+
+
 def verify(process_syscalls: bool) -> None:
     check_tool_versions()
     metadata = workspace_metadata()
@@ -637,6 +658,7 @@ def verify(process_syscalls: bool) -> None:
         ]
     )
     run_rust_tests()
+    run_ignored_workspace_corpus(metadata)
     run([sys.executable, "-m", "unittest", "discover", "-s", "tests/tooling"])
     audit_workspace_lints(metadata)
     audit_dependencies(metadata)