ops-exec: adopt universal clippy/lint baseline; warnings to zero
Format the tree with rustfmt and add the lint + supply-chain gates
bento: latest-wins cooperative cancel + gatekeeper auto-grant + checked publish ledger (Run 3 S1/S2/S3)