-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Enforce >=32-char floor on service secrets; sanitize spool suffix
-
Background Stripe fan-outs and close perf cliffs (ultra-fuzz Run 6 Performance)
-
perf: stream CSV exports + close hot/cold-path inefficiencies (ultra-fuzz Run 4, A+)
-
server: structural scan fail-closed honesty, spool perms, oauth client binding (ultra-fuzz Run 2 Security)