fix(MM-64): address PR review — targets, devenv.nix, CLAUDE.md, test plan
- rust-toolchain.toml: add x86_64-apple-darwin and aarch64-unknown-linux-gnu
targets (flake supports 4 systems; toolchain only listed 2)
- devenv.nix: simplify function signature to { pkgs, ... }: (lib and config
were unused)
- CLAUDE.md: expand --accept-flake-config explanation; add Cachix cache,
nixpkgs pin (devenv-nixpkgs/rolling fork), sqlite dev headers note
- test plan: use git ls-files --error-unmatch in step 1.6; remove hardcoded
rustc version; cargo-audit --version (not cargo audit); add cargo check step