server: adopt lint block, fix clippy, fmt
Payments resilience: fan-out dead-letter, billing guards, inbound idempotency