Fix Docker build stub and clippy derivable_impls lint

Author: Symbiont OSS Sync

Dockerfile

@@ -46,8 +46,10 @@ COPY crates/repl-lsp/Cargo.toml ./crates/repl-lsp/
 RUN mkdir -p src crates/dsl/src crates/runtime/src/bin \
     crates/channel-adapter/src \
     crates/repl-core/src crates/repl-proto/src \
-    crates/repl-cli/src crates/repl-lsp/src && \
+    crates/repl-cli/src crates/repl-lsp/src \
+    examples && \
     echo "fn main() {}" > src/main.rs && \
+    echo "fn main() {}" > examples/native-execution-example.rs && \
     echo "fn main() {}" > crates/dsl/src/main.rs && \
     echo "" > crates/dsl/src/lib.rs && \
     echo "fn main() {}" > crates/runtime/src/bin/symbiont_mcp.rs && \

crates/runtime/src/secrets/auditing.rs

@@ -13,21 +13,16 @@ use tokio::fs::OpenOptions;
 use tokio::io::AsyncWriteExt;
 
 /// Controls whether audit failures block secret operations
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[derive(Debug, Default, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
 #[serde(rename_all = "lowercase")]
 pub enum AuditFailureMode {
     /// Block the secret operation if audit logging fails (production default)
+    #[default]
     Strict,
     /// Log a warning and allow the operation to proceed
     Permissive,
 }
 
-impl Default for AuditFailureMode {
-    fn default() -> Self {
-        Self::Strict
-    }
-}
-
 /// Errors that can occur during audit operations
 #[derive(Debug, Error, Clone, Serialize, Deserialize)]
 pub enum AuditError {