server: adopt lint block, fix clippy, fmt
Format the tree with rustfmt and add the lint + supply-chain gates
Decompose AppState Phase 3: clear handler holdouts
Sweep Run #22 minors: media presign tier cap, bounded scheduler spawns, session cap