-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
server: split public image content into a separate CDN bucket (S1)
-
Require CDN in production and tighten storage key checks (ultra-fuzz Run 10 Storage)
-
storage: cover liveness by bare s3_key; ranged read for media sniff
-
server: convert pending_uploads/pending_s3_deletions/pending_refunds to compile-checked SQL (ultra-fuzz Run #1 --deep Phase 4)