Summary

The OpenAPI Drift CI job is currently failing on every PR that touches Rust code (and on main itself since #3178 merged).

Root cause: PR #3178 added a keyring dep for OS keyring vault wiring. On Linux, keyring pulls in secret-service → dbus → libdbus-sys, which needs dbus-1 dev headers + pkg-config to compile. Other Rust jobs (Test, Quality, Build) get these transitively via libwebkit2gtk-4.1-dev, but the openapi-drift job installs no system deps — so cargo xtask codegen --openapi errors out:

error: failed to run custom build command for `libdbus-sys v0.2.7`
pkg-config exited with status code 1
> pkg-config --libs --cflags dbus-1 'dbus-1 >= 1.6'

This adds an explicit apt-get install libdbus-1-dev libsecret-1-dev pkg-config step before the codegen step. Tiny + targeted — only the openapi-drift job is changed.

Test plan

• Will be self-validating: this PR's own openapi-drift run is the proof
• After merge, all currently-red Rust PRs (refactor(channels): make bridge helpers crate-private #3181 / refactor(runtime): remove unused public helpers #3182 / refactor(api): tighten visibility of internal request structs #3184 / refactor: merge duplicate type definitions across crates #3185) should turn green on retry