Pin the status every workflow test was only asserting the shape of
server: adopt lint block, fix clippy, fmt
Format the tree with rustfmt and add the lint + supply-chain gates
Harden server across 5 audit axes (ultra-fuzz Run #19 remediation)