ci: add cargo deny action (#125)

* ci: add `cargo-deny` workflow

* ci: allow advisory failures in deny workflow

* ci: only run deny workflow if `Cargo.lock` changed

* chore: driveby formatting of readme

.github/workflows/deny.yml

@@ -0,0 +1,38 @@
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'Cargo.lock'
+  pull_request:
+    branches: [main]
+    paths:
+      - 'Cargo.lock'
+
+env:
+  RUSTFLAGS: -D warnings
+  NEXTEST_EXPERIMENTAL_FILTER_EXPR: 1
+  CARGO_TERM_COLOR: always
+
+concurrency:
+  group: ${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+name: deny
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        checks:
+          - advisories
+          - bans licenses sources
+
+    continue-on-error: ${{ matrix.checks == 'advisories' }}
+
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@v3
+      - name: Check
+        uses: EmbarkStudios/cargo-deny-action@v1
+        with:
+          command: check ${{ matrix.checks }}