fix(ci): align lint-safe security paths

crates/aether-data/runtime/src/repository/auth/memory.rs

@@ -83,6 +83,10 @@ impl From<&StoredUserAuthRecord> for MemoryAuthApiKeyOwnerSnapshot {
     }
 }
 
+// The trusted snapshot is returned on the common path so callers can use the
+// complete immutable view without another lookup. Preserve this established
+// in-memory registry representation rather than introducing heap allocation.
+#[allow(clippy::large_enum_variant)]
 #[derive(Debug)]
 enum MemoryAuthApiKeyOwnerRegistryEntry {
     Trusted(MemoryAuthApiKeyOwnerSnapshot),

crates/aether-data/runtime/src/repository/wallet/memory.rs

@@ -1825,9 +1825,9 @@ impl WalletWriteRepository for InMemoryWalletRepository {
             ));
         }
         let now_secs = current_unix_secs();
-        if !current_order
+        if current_order
             .expires_at_unix_secs
-            .is_some_and(|expires_at| expires_at > now_secs)
+            .is_none_or(|expires_at| expires_at <= now_secs)
         {
             return Ok(WalletMutationOutcome::Invalid(
                 "wallet recharge order is expired".to_string(),