Go:
- Drop errcheck, unparam, prealloc, gosec, exportloopref from the
enabled set. The legacy codebase has thousands of unchecked
`tx.Rollback()` calls (idiomatic — Rollback after Commit is a
no-op), prealloc suggestions the author chose not to follow, and
gosec rules that don't apply to our control-plane code.
Real-bug linters (govet, staticcheck, ineffassign, gosimple,
unused, bodyclose, noctx, sqlclosecheck, typecheck) stay enabled.
Rust:
- Add #[allow(dead_code)] to `Config::from_aws` — legacy
AWS-only loader kept as fallback while we migrate fully to the
unified loader. Clippy's `-D warnings` was failing the build on
the unused warning.