-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
server: flip OAuth empty-scope to userinfo; validate build signing_key_path
-
Consolidate the login gate and type-witness admin writes (ultra-fuzz Run 11 Security)
-
security: close OAuth silent-consent gap, ClamAV fail-open observability, 7z/RAR + blame hardening
-
OAuth maturation + HMAC method+path+nonce (close MT S13)