Rebuild authorized_keys out of process, since the sandbox forbids sudo
server: adopt lint block, fix clippy, fmt
Format the tree with rustfmt and add the lint + supply-chain gates