Add cce-notes to the workspace; patch cce-vault to the local crate

cce-notes pins cce-vault from GitHub like any app pins cce-ui, so the
workspace redirects that pin to the work tree the same way.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

 Cargo.lock | 13 +++++++++++++
 Cargo.toml |  6 +++++-
 2 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/Cargo.lock b/Cargo.lock
index 298bbb9..6c7814d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1339,6 +1339,19 @@ dependencies = [
  "wayland-client",
 ]
 
+[[package]]
+name = "cce-notes"
+version = "0.1.0"
+dependencies = [
+ "calloop",
+ "cce-ui",
+ "cce-vault",
+ "chrono",
+ "env_logger",
+ "log",
+ "wayland-client",
+]
+
 [[package]]
 name = "cce-notifier"
 version = "0.1.0"
diff --git a/Cargo.toml b/Cargo.toml
index 84beb33..87002af 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -32,6 +32,7 @@ members = [
     "cce-lock",
     "cce-shortcuts-portal",
     "cce-vault",
+    "cce-notes",
 ]
 
 # Every app declares cce-ui (and cce-compositor also cce-window-manager) as a git
@@ -45,10 +46,13 @@ members = [
 # The pinned revs only affect builds that happen outside this workspace, which
 # means they can go stale without any build here failing: after pushing cce-ui
 # or cce-window-manager, run ./bump-revs.sh to repin the crates that depend on
-# them. The patch keys must match the pins' URL exactly, or the patch is unused
+# them (cce-vault too, pinned by cce-notes). The patch keys must match the pins' URL exactly, or the patch is unused
 # and every crate silently builds a fetched copy of the toolkit.
 [patch."https://github.com/lsgalante/cce-ui.git"]
 cce-ui = { path = "cce-ui" }
 
 [patch."https://github.com/lsgalante/cce-window-manager.git"]
 cce-window-manager = { path = "cce-window-manager" }
+
+[patch."https://github.com/lsgalante/cce-vault.git"]
+cce-vault = { path = "cce-vault" }