mt: seal the C1 loader invariant by type (Unscoped<T>), not a deny-list
multithreaded: adopt lint block, fix clippy, fmt
Format the tree with rustfmt and add the lint + supply-chain gates
Split mt-db queries.rs into per-entity modules