refactor(server): replace custom remote clients with macro-based implementation

- Replaced manual remote client functions with remote_client! macro for archive, blame, branch, commit, and diff services
- Simplified remote client creation logic using declarative macro approach
- Maintained same functionality while reducing code duplication across services

security(bare): enhance path traversal protection with comprehensive validation

- Added early relative_path validation to prevent path traversal attacks
- Implemented unified path validation to avoid TOCTOU race conditions
- Enhanced canonicalization checks for both existing and non-existent paths
- Added detailed logging for path traversal detection attempts

feat(cache): migrate from CLruCache to Moka with TTL and invalidation support

- Replaced clru dependency with moka for improved caching capabilities
- Added 300-second time-to-live for cache entries
- Implemented repository-specific cache invalidation mechanism
- Enhanced cache operations with thread-safe async support

refactor(commit): improve security validation for commit operations

- Added ref name validation to prevent command injection in cherry_pick_commit
- Implemented revision validation for commit selectors
- Added comprehensive input validation for create_commit parameters
- Enhanced file path validation to prevent traversal

main.rs

@@ -1,7 +1,7 @@
 use std::path::PathBuf;
 
 use gitks::actor::init_actor_cluster;
-use gitks::server::{serve, GitksService};
+use gitks::server::{GitksService, serve};
 
 const DEFAULT_HOST: &str = "0.0.0.0";
 const DEFAULT_PORT: &str = "50051";
@@ -12,16 +12,14 @@ async fn main() -> Result<(), Box<dyn std::error::Error>> {
     dotenvy::dotenv().ok();
     tracing_subscriber::fmt().init();
 
-    tracing::info!(
-        version = env!("CARGO_PKG_VERSION"),
-        "gitks starting up"
-    );
+    tracing::info!(version = env!("CARGO_PKG_VERSION"), "gitks starting up");
 
     let host = std::env::var("GITKS_HOST").unwrap_or_else(|_| DEFAULT_HOST.into());
     let port = std::env::var("GITKS_PORT").unwrap_or_else(|_| DEFAULT_PORT.into());
-    let storage_name = std::env::var("STORAGE_NAME").unwrap_or_else(|_| DEFAULT_STORAGE_NAME.into());
-    let grpc_addr = std::env::var("GITKS_ADVERTISE_ADDR")
-        .unwrap_or_else(|_| format!("http://{host}:{port}"));
+    let storage_name =
+        std::env::var("STORAGE_NAME").unwrap_or_else(|_| DEFAULT_STORAGE_NAME.into());
+    let grpc_addr =
+        std::env::var("GITKS_ADVERTISE_ADDR").unwrap_or_else(|_| format!("http://{host}:{port}"));
 
     let repo_prefix = std::env::var("REPO_PREFIX_PATH")
         .map_err(|_| "REPO_PREFIX_PATH environment variable is required (e.g. /data/repos)")?;
@@ -35,13 +33,10 @@ async fn main() -> Result<(), Box<dyn std::error::Error>> {
     }
 
     let addr: std::net::SocketAddr = format!("{host}:{port}").parse()?;
-    let actor_svc = GitksService::new(repo_prefix.clone());
-    let (node_actor, node_handle) = init_actor_cluster(
-        actor_svc,
-        storage_name.clone(),
-        grpc_addr.clone(),
-    ).await?;
-    let svc = GitksService::new(repo_prefix.clone())
+    let svc = GitksService::new(repo_prefix.clone());
+    let (node_actor, node_handle) =
+        init_actor_cluster(svc.clone(), storage_name.clone(), grpc_addr.clone()).await?;
+    let svc = svc
         .with_actor(node_actor.clone())
         .with_grpc_addr(grpc_addr.clone());