Format the tree with rustfmt and add the lint + supply-chain gates
audit Run 14 Phase 2: split helpers.rs grab-bag into focused submodules