-
server: adopt lint block, fix clippy, fmt
-
Move OTA updater signature onto the artifact
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
server: split public image content into a separate CDN bucket (S1)
-
tests: give ota release fixtures a valid-length signature
-
Gate OTA artifact serving on a malware scan
-
storage: cover liveness by bare s3_key; ranged read for media sniff