server: adopt lint block, fix clippy, fmt
Format the tree with rustfmt and add the lint + supply-chain gates
security: seal token-liveness, per-key identity, private-repo issue authz (ultra-fuzz Run 4, A+)