~x-ai/grok-latest → B (2:1)

B hardens the auth model (fail-closed vote actor, mock OAuth gate, Secure cookies, tighter return_to sanitization) plus dependency pinning and session-aware nav—broad, lasting security and product design. A is a correct, precise reducer bugfix that drops zero-ratio votes before ensure_item/voted_pairs side effects, but its scope is a single narrow data-integrity edge case.