fix(lint): resolve cargo fmt and clippy violations across workspace

Author: tranhoangpich

apps/backend/src/app/rate_limit.rs

@@ -26,6 +26,12 @@ struct RateLimiterInner {
     limit_per_min: u32,
 }
 
+impl Default for RateLimiter {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl RateLimiter {
     pub fn new() -> Self {
         let limit_per_min = env_u64("RATE_LIMIT_PER_MIN", 60) as u32;

apps/backend/src/app/scan.rs

@@ -1,11 +1,10 @@
 use crate::domain::{BaselineInfo, ScanProfileInput, ScanRequest, ScanResponse};
-use std::path::{Path, PathBuf};
+use std::path::Path;
 use std::time::Instant;
 use thiserror::Error;
-use verifyos_cli::core::engine::{Engine, OrchestratorError};
+use verifyos_cli::core::engine::Engine;
 use verifyos_cli::profiles::{available_rule_ids, normalize_rule_id, register_rules, RuleSelection, ScanProfile};
 use verifyos_cli::report::{apply_baseline, build_report, BaselineSummary, ReportData};
-use zip::ZipArchive;
 
 #[derive(Debug, Error)]
 pub enum ScanError {
@@ -21,6 +20,12 @@ pub struct ScanOutcome {
     pub baseline: Option<BaselineSummary>,
 }
 
+impl Default for ScanService {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl ScanService {
     pub fn new() -> Self {
         Self
@@ -67,7 +72,6 @@ impl ScanService {
             }
         }
 
-        let run_started = Instant::now();
         let bundle_path = bundle_path.as_ref();
         let run = engine.run(bundle_path)
             .map_err(|err| ScanError::ScanFailed(err.to_string()))?;

src/rules/privacy_manifest.rs

@@ -40,7 +40,9 @@ impl AppStoreRule for PrivacyManifestCompletenessRule {
             Err(_) => {
                 return Ok(RuleReport {
                     status: RuleStatus::Skip,
-                    message: Some("PrivacyInfo.xcprivacy is empty or invalid; skipping".to_string()),
+                    message: Some(
+                        "PrivacyInfo.xcprivacy is empty or invalid; skipping".to_string(),
+                    ),
                     evidence: Some(manifest_path.display().to_string()),
                 });
             }

src/rules/privacy_sdk.rs

@@ -40,7 +40,9 @@ impl AppStoreRule for PrivacyManifestSdkCrossCheckRule {
             Err(_) => {
                 return Ok(RuleReport {
                     status: RuleStatus::Skip,
-                    message: Some("PrivacyInfo.xcprivacy is empty or invalid; skipping".to_string()),
+                    message: Some(
+                        "PrivacyInfo.xcprivacy is empty or invalid; skipping".to_string(),
+                    ),
                     evidence: Some(manifest_path.display().to_string()),
                 });
             }

src/rules/xcode_requirements.rs

@@ -40,38 +40,45 @@ impl AppStoreRule for XcodeVersionRule {
         let dtxcode = plist.get_string("DTXcode");
         if let Some(version_str) = dtxcode {
             if let Ok(version_int) = version_str.parse::<u32>() {
-                if version_int < 1800 { // Assuming 2600 is Xcode 26, but let's be conservative for now or use a heuristic
+                if version_int < 1800 {
+                    // Assuming 2600 is Xcode 26, but let's be conservative for now or use a heuristic
                     // Note: User specified 2026 mandate usually corresponds to next major version.
                     // If current is Xcode 15/16, Xcode 26 is far off, but the prompt says 2026.
                     // Actually, Xcode versions don't jump to 26 that fast.
-                    // Wait, maybe the user meant Xcode 17 or 18? 
+                    // Wait, maybe the user meant Xcode 17 or 18?
                     // Let's check the prompt again: "Xcode 26+... build bằng Xcode 26 và iOS 26 SDK"
                     // That's a very high version number. Maybe it's a future-proof check.
-                    
+
                     if version_int < 2600 {
-                         failures.push(format!("Built with Xcode version {} (required 2600+)", version_str));
+                        failures.push(format!(
+                            "Built with Xcode version {} (required 2600+)",
+                            version_str
+                        ));
                     }
                 }
             }
         } else {
-             failures.push("DTXcode key missing".to_string());
+            failures.push("DTXcode key missing".to_string());
         }
 
         // 2. Check DTPlatformVersion (e.g., "18.0")
         let platform_version = plist.get_string("DTPlatformVersion");
         if let Some(version) = platform_version {
-             if let Ok(v) = version.parse::<f32>() {
-                 if v < 26.0 {
-                     failures.push(format!("Built with platform version {} (required 26.0+)", version));
-                 }
-             }
+            if let Ok(v) = version.parse::<f32>() {
+                if v < 26.0 {
+                    failures.push(format!(
+                        "Built with platform version {} (required 26.0+)",
+                        version
+                    ));
+                }
+            }
         }
 
         // 3. Check DTSDKName (e.g., "iphoneos18.0")
         let sdk_name = plist.get_string("DTSDKName");
         if let Some(name) = sdk_name {
             if !name.contains("26") {
-                 failures.push(format!("Built with SDK {} (required iOS 26 SDK)", name));
+                failures.push(format!("Built with SDK {} (required iOS 26 SDK)", name));
             }
         }