Claude review: rust: workqueue: add support for ARef<T>

[Claude Code Review Bot <claude-review@example.com>]

Patch Review

This is the core patch, adding `WorkItemPointer`, `RawWorkItem`, and related trait implementations for `ARef<T>`.

The implementation closely mirrors the `Arc<T>` implementation, which is appropriate since both are refcounted smart pointers with similar ownership semantics.

**Minor observations:**

1. In the `WorkItemPointer::run` implementation, the `work_container_of` call returns a `*mut T` (not `*const T`), but the comment says:

```rust
// SAFETY: This computes the pointer that `__enqueue` got from
// `ARef::into_raw`.
let ptr = unsafe { T::work_container_of(ptr) };
```

This is fine — `ARef::into_raw` returns `NonNull<T>` which wraps a `*mut T` internally, so there's no const-to-mut cast issue here (unlike the `Arc` version which needs `cast_mut()`). Good.

2. The `__enqueue` method:

```rust
let ptr = ARef::into_raw(self);
// SAFETY: Pointers from ARef::into_raw are valid and non-null.
let work_ptr = unsafe { T::raw_get_work(ptr.as_ptr()) };
```

This is correct. `ARef::into_raw` returns `NonNull<T>`, so `.as_ptr()` gives the `*mut T` needed by `raw_get_work`. The refcount ownership is properly transferred: if `queue_work_on` returns true, the refcount is "leaked" to the work queue; if false, it's reclaimed via `ARef::from_raw(ptr)`.

3. The trait bounds use `T: AlwaysRefCounted` separately from `T: WorkItem<ID, Pointer = Self>`. This is slightly redundant since `ARef<T>` already requires `T: AlwaysRefCounted`, but being explicit is fine for clarity and consistency with how the other impls are structured.

Looks correct.

---
Generated by Claude Code Patch Reviewer