ci: build libjerboa_native with rustup (bookworm cargo rejects v4 lockfile)

ober

c663f8c3eb382d59eb01a2284845d6ab616af7a3

diff --git a/.build.yml b/.build.yml
index 1030018..3c5a776 100644
--- a/.build.yml
+++ b/.build.yml
@@ -57,6 +57,18 @@ tasks:
       # the self-contained native jerboa-browser binary and stages it in bin/.
       JERBOA_HOME="$HOME/jerboa" SCHEME="$(command -v scheme)" \
         bash packaging/linux/build-tarball.sh
+  - native: |
+      # The interpreter test suites load (std crypto native-rust); build its
+      # cdylib once into jerbuild's cache so they can dlopen it. The compiled
+      # binary links these symbols statically (built above) and needs none. The
+      # bundled crate's Cargo.lock is v4, which bookworm's cargo can't parse, so
+      # use a current toolchain via rustup.
+      curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs \
+        | sh -s -- -y --profile minimal --default-toolchain stable
+      export PATH="$HOME/.cargo/bin:$PATH"
+      JH="$(jerbuild --jerboa-home)"
+      cargo build --release --manifest-path "$JH/jerboa-native-rs/Cargo.toml"
+      ls -l "$JH"/jerboa-native-rs/target/release/libjerboa_native.* || true
   - verify: |
       cd jerboa-browser
       so=qt-webengine/build/libjerboa_browser.so