fix(ci): align lint-safe security paths

crates/aether-data/adapters/sqlite/src/proxy_nodes.rs

@@ -1401,9 +1401,11 @@ WHERE id = ?
             && current
                 .tunnel_connected_at_unix_secs
                 .is_some_and(|last_transition| event_time < last_transition);
-        let persisted_detail = stale
-            .then(|| format!("[stale_ignored] {event_detail}"))
-            .unwrap_or(event_detail);
+        let persisted_detail = if stale {
+            format!("[stale_ignored] {event_detail}")
+        } else {
+            event_detail
+        };
         self.insert_event(
             &mutation.node_id,
             Some(node.tunnel_generation.as_str()),

crates/aether-data/adapters/sqlite/src/wallet.rs

@@ -1753,9 +1753,9 @@ ON CONFLICT DO NOTHING
             ));
         }
         let now = current_unix_secs_i64();
-        if !current
+        if current
             .expires_at_unix_secs
-            .is_some_and(|expires_at| expires_at > now.max(0) as u64)
+            .is_none_or(|expires_at| expires_at <= now.max(0) as u64)
         {
             tx.commit().await.map_sql_err()?;
             return Ok(WalletMutationOutcome::Invalid(