fix(clippy): make clippy = host libs + riscv programs (shared PROGRAMS); libkos alloc spinlock (was unlocked across threads); keystore Account; gpu Rect; factory Entry; Default impls, let-chains, div_ceil, iter loops

Makefile

@@ -28,8 +28,11 @@ check:
 fmt:
 	cargo fmt --all -- --check
 
+# Libraries on the host; programs (no_std, they link only for RISC-V) for
+# their target, as `build` builds them. The adapter is `kernel-clippy`'s.
 clippy:
-	cargo clippy --workspace -- -D warnings
+	cargo clippy --workspace --exclude adapter-riscv --lib -- -D warnings
+	cargo clippy --target $(RISCV_TARGET) --release $(PROGRAMS) -- -D warnings
 
 test:
 	cargo test --workspace
@@ -48,14 +51,15 @@ kani-kernel:
 
 kani: kani-types kani-domain kani-kernel
 
+PROGRAMS = -p init -p echo -p sleep -p snake \
+	-p display-qemu -p input-qemu -p storage-qemu \
+	-p log-server -p permission-manager -p session-server -p smptest -p spawntest -p hello \
+	-p terminal-server -p shell -p cat -p ls -p counter -p gatekeeper
+
 # Programs first: the kernel image packs init and storage (see the
 # adapter's build.rs).
 build:
-	cargo build --target $(RISCV_TARGET) --release \
-		-p init -p echo -p sleep -p snake \
-		-p display-qemu -p input-qemu -p storage-qemu \
-		-p log-server -p permission-manager -p session-server -p smptest -p spawntest -p hello \
-		-p terminal-server -p shell -p cat -p ls -p counter -p gatekeeper
+	cargo build --target $(RISCV_TARGET) --release $(PROGRAMS)
 	cargo build --target $(RISCV_TARGET) --release -p adapter-riscv
 
 # The keystore holds the owner's sealed keys: made once, never rebuilt.