refactor(cache): redesign cache system with structured keys and improved performance

- Add repo_path parameter to cached_response and cached_vec_response functions
- Implement structured cache key format with namespace, repo_path, and request proto
- Replace global cache with Moka in-memory cache using weight-based eviction
- Set 256MB memory cap with 10-minute TTL and 2-minute TTI policy
- Add metrics collection for cache operations and evictions
- Implement efficient repo-scoped invalidation using key structure
- Add detailed documentation comments explaining cache architecture
- Remove outdated dependencies and update dependency versions
- Add error handling for encoding failures in cache operations
- Optimize Vec responses with length-delimited encoding and pre-allocation

tag/create_tag.rs

@@ -6,7 +6,10 @@ impl GitBare {
     pub fn create_tag(&self, request: CreateTagRequest) -> GitResult<Tag> {
         crate::sanitize::validate_ref_name(&request.name)?;
         let target = match request.target.and_then(|s| s.selector) {
-            Some(crate::pb::object_selector::Selector::Oid(oid)) => oid.hex,
+            Some(crate::pb::object_selector::Selector::Oid(oid)) => {
+                crate::sanitize::validate_oid_hex(&oid.hex)?;
+                oid.hex
+            }
             Some(crate::pb::object_selector::Selector::Revision(name)) => {
                 crate::sanitize::validate_revision(&name.revision)?;
                 name.revision

tag/delete_tag.rs

@@ -4,6 +4,7 @@ use crate::pb::DeleteTagRequest;
 
 impl GitBare {
     pub fn delete_tag(&self, request: DeleteTagRequest) -> GitResult<()> {
+        crate::sanitize::validate_ref_name(&request.name)?;
         let result = duct::cmd(
             "git",
             [

tag/get_tag.rs

@@ -6,6 +6,7 @@ use crate::pb::{GetTagRequest, ObjectType, Tag};
 
 impl GitBare {
     pub fn get_tag(&self, request: GetTagRequest) -> GitResult<Tag> {
+        crate::sanitize::validate_ref_name(&request.name)?;
         let repo = self.gix_repo()?;
         let refname = format!("refs/tags/{}", request.name);
         let mut r = repo.find_reference(refname.as_str())?;

tag/verify_tag.rs

@@ -4,6 +4,7 @@ use crate::pb::{VerifiedSignature, VerifyTagRequest};
 
 impl GitBare {
     pub fn verify_tag(&self, request: VerifyTagRequest) -> GitResult<VerifiedSignature> {
+        crate::sanitize::validate_ref_name(&request.name)?;
         let result = duct::cmd(
             "git",
             [