Apply a SyncKit cap increase now, not at the next renewal
server: adopt lint block, fix clippy, fmt
Format the tree with rustfmt and add the lint + supply-chain gates
server: module docs on leaf db modules; glob the audit-file gitignore