server: adopt lint block, fix clippy, fmt
Format the tree with rustfmt and add the lint + supply-chain gates
Decompose AppState Phase 2: migrate remaining api top-level + exports
Frontend: kill media-picker XSS; render_string surfaces errors