🛡️ Sentinel: [MEDIUM] Fix NaN validation and empty chain panic

[kassoulet]

🚨 Severity: MEDIUM

💡 Vulnerability:

1. The application failed to validate that plugin parameters loaded from YAML mapping formats were finite numbers, allowing NaN or Infinity to enter the audio processing pipeline.
2. Loading an empty plugin list via a YAML configuration file caused an index-out-of-bounds panic during the processing initialization.

🎯 Impact:

• Denial of Service (DoS): An empty or malformed configuration file can crash the application.
• Unstable Audio Processing: NaN values in DSP (Digital Signal Processing) can lead to extreme audio artifacts (loud noise or complete silence), potentially causing hearing damage or hardware issues if output is amplified.

🔧 Fix:

• Added is_finite() validation in src/config.rs for parameters defined in YAML mappings.
• Centralized the plugins.is_empty() check in src/main.rs so it applies to both CLI and YAML input sources.

✅ Verification:

• Verified that NaN in YAML is now correctly rejected with an error message.
• Verified that an empty plugin list in YAML now results in a clean error instead of a panic.
• Ran the full test suite (cargo test) to ensure no regressions.

---

PR created automatically by Jules for task 13196794189993750093 started by @kassoulet

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.