M14.4: robustness docs name the library fuzzing and main's brands gate

docs/development.md lists the library files import_fuzz now covers, and the
PR template's CI checklist includes `cargo xtask brands`, which main added
after the no-panics branch was cut.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

.github/pull_request_template.md

@@ -8,7 +8,7 @@
 
 ## Checklist
 
-- [ ] `cargo xtask ci` passes (fmt, clippy, tests, assets, layers, wasm).
+- [ ] `cargo xtask ci` passes (fmt, clippy, tests, assets, brands, layers, wasm).
 - [ ] No panics in shipped code: no `unwrap()`, `expect()`, `panic!`, `unreachable!`, `todo!` or
       `unimplemented!` outside tests, and no unchecked indexing on data from files, parameters or
       messages. Errors are returned as `Result` and shown to the user

docs/development.md

@@ -84,8 +84,9 @@ web build has no net at all.
 
 Untrusted input has property tests that must never panic:
 
-- `crates/engine/tests/import_fuzz.rs`: garbage, hostile and mutated SVG and PDF, imported, then
-  rendered and exported.
+- `crates/engine/tests/import_fuzz.rs`: garbage, hostile and mutated SVG and PDF, and swatch
+  (`.vcswatches`, `.gpl`), graphic style (`.vcstyles`) and flattener preset (`.vcflattener`)
+  libraries, loaded and used, then rendered and exported.
 - `crates/engine/tests/command_sweep.rs`: every command with junk parameters.
 - `crates/format/tests/prop_format.rs`: garbage and mutated `.vectorcraft` files.
 - `crates/mcp/tests/protocol_props.rs`: malformed MCP messages.