~anthropic/claude-sonnet-latest → A (6:4)

Side A fixes a real, scoped security bug (XSS via unsanitized Reddit HTML) with a small, well-tested, focused change (sanitize.rs + two call sites + unit tests). Side B is a large, unfocused grab-bag (dotenv loading, explicit fetch UI, event-log payload storage/replay, reddit config refactor, integration test harness) that adds significant surface area and complexity without a single clear, well-isolated purpose, making it harder to review and more risky despite adding some legitimate architecture (raw payload persistence, explicit fetch).