Completes the ctypes lifetime audit. All eight FFI call sites now assign _to_rust_bytes() to a local var before passing to c_char_p, ensuring the bytes object lives for the full duration of the Rust call. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>