~x-ai/grok-latest → A (2:1)

A restores broken E2E auth by fixing real mock-server bugs (Clojure `str/split` needing a regex, reading `getRequestBody` instead of `getInputStream`, 302 content-length, null-safe token/state handling, handler error trapping), which unblocks Playwright login flows project-wide. B is a solid but narrower UX polish: wire the existing `set_garden_pin` clear POST into ranked child-row pin icons plus CSS/test coverage, valuable locally but less foundational than repairing auth test infrastructure.