fix(ci): fix sota_evaluation type-limit warning, cargo-deny skip advisories

- sota_evaluation.rs: replace useless usize >= 0 comparison
- cargo-deny: check only licenses/bans/sources (advisories handled
  by cargo-audit separately; advisory DB uses CVSS 4.0 unsupported
  by current cargo-deny)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: osvalois

.github/workflows/devsecops.yml

@@ -54,7 +54,7 @@ jobs:
       - name: Install cargo-deny
         run: cargo install --locked cargo-deny@0.18.2
       - name: Run cargo-deny
-        run: cargo deny check --config deny.toml
+        run: cargo deny check licenses bans sources --config deny.toml
 
   # ── Dependency vulnerability audit (post-merge + schedule only) ──────────
   # Skipped on PRs: cargo-audit requires a full workspace resolve and is

crates/halcon-cli/tests/sota_evaluation.rs

@@ -267,11 +267,8 @@ mod sota_tests {
     fn mcp_integration_available() {
         let config = AppConfig::default();
 
-        // MCP should be configurable (may have 0 reconnects as default)
-        assert!(
-            config.mcp.max_reconnect_attempts >= 0,
-            "MCP config should exist"
-        );
+        // MCP config should be present and initialized
+        let _ = config.mcp.max_reconnect_attempts; // field exists
 
         // Servers list should be available
         assert!(