openai/gpt-chat-latest → A (4:1)

Side A fixes a concrete security vulnerability by introducing Ammonia-based sanitization for untrusted Reddit `body_html` before `maud::PreEscaped` rendering, wiring it into both render paths and adding tests that verify scripts and event handlers are stripped while benign markup is preserved. Side B is a broad refactor that separates identity and path canonicalization and changes API conventions (stored-form usernames, optional delegates), but it is largely structural and behavioral cleanup rather than delivering a comparably critical, lasting user-facing improvement.