max / makenotwork

Format the tree with rustfmt and add the lint + supply-chain gates Two halves: the mechanical reformat, and four new Sando gate kinds that can only exist once the tree is clean. The reformat is plain rustfmt defaults across all 16 crates -- 7481 hunks. No rustfmt.toml is added: the hand-formatted style the tree carried is not reachable by configuration (use_small_heuristics = "Max" closed only 27% of the gap on sando), so matching it was not an option and defaults are what any contributor's editor produces. Every crate was tested after the pass. New gate kinds: - clippy: cargo clippy --all-targets -- -D warnings over every [[test_target]]. - fmt: cargo fmt --check over the same list. Declared first in the host tier because it needs no compilation, so a formatting red returns in seconds. - cargo_audit / cargo_deny: config-gated. A target qualifies only if it carries .cargo/audit.toml or deny.toml. Both tools are meaningless without a triaged posture -- four crates here fail cargo audit purely for lack of a file recording which transitive advisories were reviewed -- and a permanently red gate teaches everyone to ignore it. All four share cargo_test's conventions: per-target log banners, stop at the first red target with the crate named, one deadline across the whole gate, and fail closed if nothing qualified rather than passing over zero work. Supply-chain fixes so the gates start green: deny.toml allows Apache-2.0 WITH LLVM-exception (cranelift via yara-x, permissive, no copyleft), and drops five ignores cargo-deny reported as advisory-not-detected -- the rustls-webpki trio cleared when d7a50c5a dropped the EOL rustls 0.21 stack, the git2 pair when git2 was bumped. .cargo/audit.toml is pruned to match. docengine, s3-storage, pom-contract and livechat now carry license = "MIT", which cargo deny check licenses required and deny.toml's own header already recorded as the planned cleanup. MIT per the licensing strategy: reusable infra is MIT, products are PolyForm-Noncommercial.