chore(lints): deny correctness/suspicious and enable clippy::all

[h4x0r]

What

Completes [workspace.lints.clippy] to the fleet-canonical set (CLAUDE.core.md → "Rust Lint Posture"):

• adds all = { level = "warn", priority = -1 }
• adds correctness = { level = "deny", priority = -1 }
• adds suspicious = { level = "deny", priority = -1 }
• converts the individual allows from bare "allow" to { level = "allow", priority = 1 }

Why

The repo already denied unwrap_used/expect_used, but everything else ran at pedantic warn only — so a genuine correctness finding would have rendered as a warning at most. This is part of a fleet-wide sweep; the same shaped gap in sibling repos concealed a release-mode i64 overflow, a public-API panic, and a 16 GiB unbounded allocation from an untrusted length field.

The priority change is load-bearing, not cosmetic: clippy's lint_groups_priority rejects a manifest where a denied group shares priority 0 with an individual lint, and priority 1 is what makes the allows actually outrank the grouped entries.

Verification

Config-only change — zero sites lit up. Verified after touching the crate roots so this is a real recompile, not a cache hit:

$ cargo clippy --all-targets --workspace -- -D warnings
    Finished `dev` profile [unoptimized + debuginfo] target(s)
$ cargo fmt --check        # clean
$ cargo test --workspace   # 0 failed

Scope note

Effective per-member configuration was checked, not just the root — every member inherits via [lints] workspace = true with no member-local [lints.clippy] table that would silently replace inheritance.

🤖 Generated with Claude Code