Performance: - Add generation counter to Terminal::process() (wrapping u64 bump) - Cache find_urls result per Pane keyed on (generation, vis_rows, vis_cols) All three call sites (render, cursor icon, cmd+click) now use the cache; URL scan only re-runs when terminal content or viewport dimensions change Reliability: - Replace .expect() on try_clone_reader/take_writer in create_pane with proper error handling; logs to stderr and returns None instead of panicking Supply chain: - Add deny.toml: advisory DB checks, license allowlist, duplicate warnings - Add license = "MIT" to Cargo.toml Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>