chore: roll up security migration - #161

No reportable defect. The diff changes an `expect(missing_docs)` lint attribute on a generated-ABI shim to `allow(missing_docs)` and bumps the vendored `tinybus`/`tinybus-module` version floors to 0.3.12. Neither changes runtime behaviour that a test could pin: the attribute swap cannot regress silently (a missing-docs release would be caught by the compiler), and the version bump is exercised by the existing module tests that drive the generated exports. Nothing to demand a test for.

No findings.