Pin the Rust toolchain and nextest profile so both service crates share a reproducible verification baseline.
