events: traffic-weighted appears_at lead-in replaces the pre-buffer

Narrow ResultEntry to a discriminated union in the webclient

refactor(data): drop legacy toilet boolean columns from pois

feat(map): low-zoom aggregation tile source

RUSTSEC-2026-0119: CPU exhaustion during message encoding due to O(n²) name compression

RUSTSEC-2026-0098: Name constraints for URI names were incorrectly accepted

RUSTSEC-2026-0097: Rand is unsound with a custom logger using `rand::rng()`

RUSTSEC-2026-0049: CRLs not considered authorative by Distribution Point due to faulty matching logic

RUSTSEC-2026-0045: Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

RUSTSEC-2026-0048: CRL Distribution Point Scope Check Logic Error in AWS-LC