feat: use patched vendored sources for builds

Use patched and filtered vendored sources for
builds.

Signed-off-by: Miguel Martín <[email protected]>

.cargo/config

@@ -0,0 +1,5 @@
+[source.crates-io]
+replace-with = "vendored-sources"
+
+[source.vendored-sources]
+directory = "vendor"

.github/workflows/analysis.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Run DevSkim scanner
         uses: microsoft/DevSkim-Action@v1
         with:
-          ignore-globs: '**/examples/**'
+          ignore-globs: '**/examples/**,vendor/**'
 
       - name: Upload DevSkim scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3

.github/workflows/ci.yml

@@ -37,7 +37,7 @@ jobs:
           check_filenames: true
           check_hidden: true
           ignore_words_file: .github/spellcheck-ignore
-          skip: "./docs/Gemfile.lock,./docs/_config.yml,./.github,./.git"
+          skip: "./docs/Gemfile.lock,./docs/_config.yml,./.github,./.git,./vendor"
 
   fmt:
     name: Rustfmt