~anthropic/claude-sonnet-latest → B (35:65)

Side A vendors a large, mostly generated durable/ crate (docs, examples, lockfiles) and swaps entity storage to RocksDB, but this was later superseded by pinning durable as an external git dep in Side B, making much of A's vendored code and its own Cargo.lock churn transient scaffolding. Side B fixes a real security bug (votes silently falling back to an anonymous actor instead of failing closed), gates a mock-OAuth backdoor behind an explicit test-only env var, adds Secure cookie flags and open-redirect hardening, and pins the durable dependency to an immutable rev rather than a floating branch — all small, precise, and durable improvements to correctness and security posture.