feat(qs): add native Stripe-compatible shim

[proggeramlug]

Summary

• add a bundled, provenance-pinned qs@6.15.3 native binding so Stripe no longer compiles the AOT-hostile get-intrinsic / ES-shims chain
• implement GC-safe nested stringify behavior, including Stripe's indexed arrays and serializeDate callback, plus common qs encoding, filtering, sorting, null, charset, and array-format options
• implement safe nested parse behavior with duplicate modes, depth/parameter/array limits, charset sentinels, sparse arrays, dot notation, and prototype-pollution guards
• wire the binding through native dispatch, API manifests, provider routing, well-known provenance, workspace governance, and release notes
• add an end-to-end regression with hostile installed qs and get-intrinsic sentinels, covering CommonJS Stripe-style usage plus named, namespace, and default imports

The binding is deliberately marked partial: regex delimiters and the complete custom decoder/extension-hook contracts are not claimed as full upstream compatibility.

No package version was bumped.

Closes #8751

Validation

• cargo test -p perry-ext-qs --lib (11 passed)
• cargo test -p perry-codegen --test manifest_consistency (5 passed)
• cargo test -p perry-codegen ext_registry --lib (13 passed)
• cargo test -p perry --test issue_8751_qs_native_shim -- --nocapture (passed after rebasing onto latest main)
• cargo check -p perry-codegen -p perry-api-manifest -p perry
• cargo clippy -p perry-ext-qs --all-targets --no-deps -- -D warnings
• python scripts/workspace_architecture.py --check
• python scripts/binding_governance.py --check
• node scripts/binding_pins.mjs --check
• focused cargo fmt --check and git diff --check

[coderabbitai]

Warning

Review limit reached

Next included review available in 11 minutes.

View limit details

Limit details: You’ve used all 8 included reviews currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 7e267a74-2051-462b-bc67-12ce998bbe20

📥 Commits

Reviewing files that changed from the base of the PR and between 8f026e5 and 2964c25.

⛔ Files ignored due to path filters (1)

• Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (20)

• Cargo.toml
• changelog.d/8751-native-qs.md
• crates/perry-api-manifest/src/entries.rs
• crates/perry-api-manifest/src/entries/part_4.rs
• crates/perry-codegen/src/ext_registry.rs
• crates/perry-codegen/src/lower_call/native_table/mod.rs
• crates/perry-codegen/src/lower_call/native_table/qs.rs
• crates/perry-ext-qs/Cargo.toml
• crates/perry-ext-qs/src/codec.rs
• crates/perry-ext-qs/src/lib.rs
• crates/perry-ext-qs/src/options.rs
• crates/perry-ext-qs/src/parse.rs
• crates/perry-ext-qs/src/runtime.rs
• crates/perry-ext-qs/src/stringify.rs
• crates/perry-ext-qs/src/test_async_shims.rs
• crates/perry/src/commands/compile/well_known.rs
• crates/perry/tests/issue_8751_qs_native_shim.rs
• crates/perry/well_known_bindings.toml
• docs/src/native-libraries/governance.md
• workspace-architecture.json

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[proggeramlug]

Landed on main via the #8822 batch.