feat: R-minor-sensitive binary builds (full + iterative) (#84)

## Summary

Builds R-minor-sensitive CRAN packages once per installed R minor version (into per-minor S3 slots `…/contrib/<x.y>/`) and everything else once into the generic slot, driven by bincraft 4.2.0's ABI classifier. Both the full and iterative pipelines are covered.

## What's in here

**Detection / precompute**

- `local/r-minor-helpers.R` — pure `classify_from_metadata()` (NeedsCompilation / risky `LinkingTo`) + `parse_build_args()`, with unit tests.
- `local/packages-to-build.R` — adds a per-package `r_minor_sensitive` flag: cheap CRAN-metadata rules first, source download + `bincraft::needs_per_minor_recompile()` only for the ambiguous compiled subset (fail-safe to sensitive). Classified once per package, applied to all versions.

**Full build**

- `local/build-all.R` — passes the per-row `is_r_minor_sensitive` flag; new `--sensitive-only` mode builds just the risky subset.
- `.crow/build-all-versions-{amd64,arm64}.yaml` — install-deps persists the sensitive subset; build step runs a sensitive-only pass under each non-primary `/opt/R/*` minor; new step uploads the generic index plus a per-minor index for each minor.

**Iterative build**

- All 14 `.crow/process-updates-*.yaml` — primary pass uses `r_minor_detection = 'classifier'`; a sensitive-only multi-R pass builds risky updates under each other minor; per-minor index upload added.

**Tooling / housekeeping**

- Pins bincraft `v4.1.1` → `v4.2.0` across all workflows; removes the superseded standalone `build-r-minor-sensitive-packages.yaml`.
- Adds prek/pre-commit hooks (prettier, markdownlint, editorconfig-checker, yamllint, air) and applies them repo-wide; excludes the verbatim GPL `LICENSE.md` and auxiliary shell scripts.
- Design + implementation docs under `docs/superpowers/`.

## Requires before merge

- A `v4.2.0` git tag must be pushed on the bincraft repo (codefloe.com/rpkgs/bincraft) — the workflow install steps pin `@v4.2.0`. The full-build install-deps clones `main`, so it is unaffected.

Reviewed-on: #84

local/debug-packages-writing.R

@@ -2,42 +2,58 @@ library(future)
 future::plan(multisession)
 future::plan(sequential)
 time = Sys.time()
-files <- s3fs::s3_dir_ls(sprintf("devxy-r-package-binaries-hel1/arm64/rhel9/latest/src/contrib/Archive"), recurse = T)
+files <- s3fs::s3_dir_ls(
+  sprintf(
+    "devxy-r-package-binaries-hel1/arm64/rhel9/latest/src/contrib/Archive"
+  ),
+  recurse = T
+)
 Sys.time() - time
 
 
-
 archive <- llply(dirs, function(dir) {
-  files <- list.files(dir, recursive = FALSE, full.names = TRUE, pattern = "*.tar.gz")
+  files <- list.files(
+    dir,
+    recursive = FALSE,
+    full.names = TRUE,
+    pattern = "*.tar.gz"
+  )
   if (length(files) == 0) {
     print(paste0("Error: Empty directory: ", dir))
     return(NULL)
   }
   info <- file.info(files)
 
-  tryCatch({
-    rownames(info) <- paste0(basename(dirname(files)), "/", basename(files))
-  }, error = function(e) {
-    print(paste0("Error: Exception catched for Archived directory: ", dir))
-    print(e)
-    return(NULL)
-  })
+  tryCatch(
+    {
+      rownames(info) <- paste0(basename(dirname(files)), "/", basename(files))
+    },
+    error = function(e) {
+      print(paste0("Error: Exception catched for Archived directory: ", dir))
+      print(e)
+      return(NULL)
+    }
+  )
 
   info
 })
 
-tryCatch({
-  rownames(info) <- paste0(basename(dirname(files)), "/", basename(files))
-}, error = function(e) {
-  print(paste0("Error: Exception catched for Archived directory: ", dir))
-  print(e)
-  return(NULL)
-})
+tryCatch(
+  {
+    rownames(info) <- paste0(basename(dirname(files)), "/", basename(files))
+  },
+  error = function(e) {
+    print(paste0("Error: Exception catched for Archived directory: ", dir))
+    print(e)
+    return(NULL)
+  }
+)
 
 
-
-
-curl::curl_download("https://cran.devxy.io/amd64/rhel9/latest/src/contrib/PACKAGES.db", "PACKAGES.db")
+curl::curl_download(
+  "https://cran.devxy.io/amd64/rhel9/latest/src/contrib/PACKAGES.db",
+  "PACKAGES.db"
+)
 con = DBI::dbConnect(RSQLite::SQLite(), "PACKAGES.db")
 df = DBI::dbReadTable(con, "packages")
 
@@ -50,6 +66,14 @@ which(grepl("digest", df$Package))
 system("cat /tmp/PACKAGES | grep '^Package: digest' | wc -l")
 
 
-curl::curl_fetch_memory("https://cloud.r-project.org/src/contrib/Meta/archive.rds")
-remotes = readRDS(url("https://cloud.r-project.org/src/contrib/Meta/archive.rds", "rb"))
-packages = readRDS(url("https://cran.devxy.io/arm64/noble/latest/src/contrib/PACKAGES.rds", "rb"))
+curl::curl_fetch_memory(
+  "https://cloud.r-project.org/src/contrib/Meta/archive.rds"
+)
+remotes = readRDS(url(
+  "https://cloud.r-project.org/src/contrib/Meta/archive.rds",
+  "rb"
+))
+packages = readRDS(url(
+  "https://cran.devxy.io/arm64/noble/latest/src/contrib/PACKAGES.rds",
+  "rb"
+))