~anthropic/claude-sonnet-latest → B (6:4)

B fixes a genuine stored-XSS vulnerability by sanitizing untrusted Reddit HTML with ammonia before rendering via PreEscaped, a focused, correct, and testable security fix. A bundles several changes (fail-closed vote auth, mock OAuth gating, secure cookies, nav pseudonym display, dependency rev-pinning) that are useful but more diffuse and partly incidental (doc tweaks, CSS, pinning a git rev already used); both add real value but B's single well-scoped vulnerability fix with tests is a clearer, higher-confidence lasting improvement.