~x-ai/grok-latest → A (3:1)

A adds a real, lasting XSS defense (ammonia whitelist + tests) for untrusted Reddit HTML embedded via PreEscaped, fixing a concrete security hole at the render sites. B is a worthwhile unification of /post* into the /ui RPC path and deletion of web_post.rs, but it is mostly moving and rewiring existing logic without new protective or functional substance.