server: adopt lint block, fix clippy, fmt
Format the tree with rustfmt and add the lint + supply-chain gates
Run #15: fix 5 SERIOUS findings; seal subscription access gate
test: streaming workflow gaps (12 tests)