[INJECT-01] Bootstrap the Zig 0.17 Pantry package

Objective

Create the MIT-licensed repository structure, Zig 0.17 build, Pantry manifest and lock, package metadata, CI, formatting, generated-header path, security policy, and third-party notices without Git submodules.

Deliverables

• Implement the complete scoped behavior without Git submodules.
• Keep public APIs explicit about ownership, resource limits, and errors.
• Add focused unit, integration, compatibility, fuzz, and benchmark coverage as applicable.
• Update documentation and machine-readable compatibility status.

Acceptance criteria

• The scoped implementation and tests are merged on main.
• Zig formatting, focused tests, and the repository CI suite pass.
• No unexplained compatibility skips, silent fallbacks, leaks, or unbounded hostile-input paths remain.
• Benchmarks or security evidence is attached when this affects a hot or untrusted path.

Relationships

• Parent: INJECT-00

Blocked by

None

Blocks

• INJECT-02
• INJECT-03
• INJECT-06

Baselines

• Zig 0.17-dev resolved and locked through Pantry.
• ModSecurity 3.0.16, Coraza 3.7.0, CRS 4.28.0, and libinjection 4.0.0 where applicable.

Implemented in cc779d4. Pantry pins Zig 0.17.0-dev.1441+d5181a9, the MIT package/CI/security/notices/header layout is present, no submodules are used, and the CI run passed: https://github.com/zig-utils/zig-injection/actions/runs/29892651261