Format the tree with rustfmt and add the lint + supply-chain gates
Decompose AppState Phase 2: migrate auth, sso, embed to slices
server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability