refactor: split stage 6 sumchecks

.github/workflows/refactor-audit-stack.yml

@@ -0,0 +1,62 @@
+name: Refactor Audit Stack
+
+on:
+  push:
+    branches:
+      - refactor/audit-prep
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+concurrency:
+  group: refactor-audit-stack
+  cancel-in-progress: true
+
+jobs:
+  update-stack:
+    name: Update draft stack branches
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout source branch
+        uses: actions/checkout@v4
+        with:
+          ref: refactor/audit-prep
+          fetch-depth: 0
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Fetch stack bases
+        run: |
+          git fetch origin main refactor/audit-prep
+          git fetch origin '+refs/heads/stack/*:refs/remotes/origin/stack/*' || true
+
+      - name: Configure git author
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      - name: Rebuild and push stack
+        run: |
+          bash stack/update-stack.sh \
+            --apply \
+            --rebuild \
+            --commit \
+            --push \
+            --cargo-metadata \
+            --check-coverage \
+            --from origin/refactor/audit-prep \
+            --base origin/main \
+            --start-at 07
+
+      - name: Create or update draft PRs
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          git switch refactor/audit-prep
+          bash stack/open-prs.sh \
+            --apply \
+            --base main \
+            --source refactor/audit-prep \
+            --start-at 07

.github/workflows/rust.yml

@@ -134,7 +134,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
-      - uses: crate-ci/typos@v1.46.0
+      - uses: crate-ci/typos@v1.46.2
         with:
           files: .
 
@@ -239,7 +239,12 @@ jobs:
         run: |
           set -euo pipefail
           for pkg in ${{ steps.discover.outputs.pkgs }}; do
-            cargo nextest run -p "$pkg" --no-tests=pass
+            features=()
+            if cargo metadata --format-version=1 --no-deps \
+                 | jq -e --arg pkg "$pkg" '.packages[] | select(.name == $pkg) | .features | has("test-utils")' >/dev/null; then
+              features=(--features test-utils)
+            fi
+            cargo nextest run -p "$pkg" "${features[@]}" --no-tests=pass
           done
 
   test-inlines:
@@ -297,7 +302,7 @@ jobs:
       - name: Install nextest
         uses: taiki-e/install-action@nextest
       - name: Run tracer tests
-        run: cargo nextest run --release -p tracer
+        run: cargo nextest run --release -p tracer --features test-utils
 
   zklean-extractor-tests:
     name: ZkLean extractor tests