server: adopt lint block, fix clippy, fmt
synckit: invalidate sync tokens on device removal + security audit log (ultra-fuzz --deep Security A+)