Add resource-bounded local verification lanes

Run pinned Rust and browser toolchains in fast and full container lanes with explicit CPU and memory limits.

.gitignore

@@ -6,4 +6,16 @@ docs/journal
 
 # TLC working directories
 docs/protocol/states/
-states/
+states/
+
+# Rust
+/target/
+
+# Web
+/web/node_modules/
+/web/**/node_modules/
+/web/dist/
+/web/.cache/
+/web/.vite/
+/web/playwright-report/
+/web/test-results/