Rust CLI: port doctor connection and compatibility diagnostics

docs/release-notes/2.5.0.md

@@ -62,6 +62,8 @@ Every asset carries a GitHub build-provenance attestation. Linux binaries are st
 
 ## Intentional differences from 2.x
 
+- **Connection URLs:** runtime base URLs containing user information, queries, fragments or whitespace are refused before a request. Use token options or profile token references for authentication.
+- **Doctor output:** human diagnostics show untrusted formatter markup literally and escape terminal controls and embedded line breaks. Machine JSON retains Server data as structurally encoded values.
 - **Shell completion:** generating a script requires an executable name made of ASCII letters, digits, dots, underscores and hyphens, starting with a letter or underscore. Unsafe names are refused before any shell code is emitted. Completion debug logs now use a private `completion` directory alongside the CLI config file, and refuse unsafe log entries instead of following temporary-file links.
 - **Prompting without a terminal:** 2.x treated a non-terminal stdin as interactive and printed a "Do you want to run … instead?" prompt to stdout before exiting 1. 2.5.0 prompts only on a terminal; otherwise it reports the error on stderr, as 2.x did with `-n`.
 - **`--format=xml`:** this works in the standalone binary. The 2.x standalone binary failed with a PHP fatal error, because it lacked the DOM extension. The output matches the 2.x PHAR.

rust/README.md

@@ -21,6 +21,7 @@ every command group reaches parity.
 | `env:list`, `env:set`, `env:use`, `env:show`, `env:delete` | Ported |
 | `server:health`, `server:info` (and `cluster:info`) | Ported |
 | Compatibility preflight, session and `--version` warnings, exit 8 refusals | Ported |
+| `doctor`: redacted connection sources, server metadata, warnings and next steps | Ported |
 | Workflow, namespace and schedule commands | Next slices |
 | `--tls-verify=false` against HTTPS | Refused until durable-workflow/sdk-rust#180 |