Adopt lint block, pin stable toolchain, cargo fmt, fix clippy
build-keychain: unique keychain + search-list per run
Track the dist release scripts; move Apple credentials to the environment