Implement Phase 9: client libraries (Go, Rust, Lisp, Python)

- clients/README.md: canonical API surface and error type reference
- clients/testdata/: shared JSON response fixtures
- clients/go/: mciasgoclient package; net/http + TLS 1.2+; sync.RWMutex
  token state; DisallowUnknownFields on all decoders; 25 tests pass
- clients/rust/: async mcias-client crate; reqwest+rustls (no OpenSSL);
  thiserror MciasError enum; Arc<RwLock> token state; 22+1 tests pass;
  cargo clippy -D warnings clean
- clients/lisp/: ASDF mcias-client; dexador HTTP, yason JSON; mcias-error
  condition hierarchy; Hunchentoot mock-dispatcher; 37 fiveam checks pass
  on SBCL 2.6.1; yason boolean normalisation in validate-token
- clients/python/: mcias_client package (Python 3.11+); httpx sync;
  py.typed; dataclasses; 32 pytest tests; mypy --strict + ruff clean
- test/mock/mockserver.go: in-memory mock server for Go client tests
- ARCHITECTURE.md §19: updated per-language notes to match implementation
- PROGRESS.md: Phase 9 marked complete
- .gitignore: exclude clients/rust/target/, python .venv, .pytest_cache,
  .fasl files
Security: token never logged or exposed in error messages in any library;
TLS enforced in all four languages; token stored under lock/mutex/RwLock

clients/rust/target/debug/.fingerprint/rustls-webpki-1a6e645fda1aa192/lib-webpki.json

@@ -0,0 +1 @@
+{"rustc":16243257175721966122,"features":"[\"alloc\", \"ring\", \"std\"]","declared_features":"[\"alloc\", \"aws-lc-rs\", \"aws-lc-rs-fips\", \"aws-lc-rs-unstable\", \"default\", \"ring\", \"std\"]","target":5054897795206437336,"profile":9416236325206317261,"path":1406332954766169981,"deps":[[5491919304041016563,"ring",false,8505340459113465419],[8995469080876806959,"untrusted",false,3680106807523039916],[17894305664988315121,"pki_types",false,12132946894082361702]],"local":[{"CheckDepInfo":{"dep_info":"debug/.fingerprint/rustls-webpki-1a6e645fda1aa192/dep-lib-webpki","checksum":false}}],"rustflags":[],"config":2069994364910194474,"compile_kind":0}