server: adopt lint block, fix clippy, fmt
security: seal git-push CSRF, close 7z/RAR polyglot evasion, exhaustive sanitizer allowlists
server: convert remaining money-path DB modules to compile-checked SQL (ultra-fuzz Run #1 --deep Phase 4)