server: adopt lint block, fix clippy, fmt
Format the tree with rustfmt and add the lint + supply-chain gates
server: flip OAuth empty-scope to userinfo; validate build signing_key_path