openai/gpt-chat-latest → A (3:2)

Side A fixes a significant cross-site scripting risk by introducing centralized HTML sanitization with `ammonia` before rendering Reddit `body_html`, updating both rendering paths to use `entity_body_html`, and adding tests to verify benign markup is preserved while scripts and event handlers are removed. Side B improves Reddit API reliability by requiring OAuth when configured, retrying after 401/403 with token refresh, and improving error handling, but its impact is narrower to deployment and API interactions, whereas the security hardening in Side A provides broader, lasting protection for all rendered untrusted content.