server: write build, issue and scan metadata into refs/notes/mnw/*
server: adopt lint block, fix clippy, fmt
Move OTA updater signature onto the artifact
Format the tree with rustfmt and add the lint + supply-chain gates