~x-ai/grok-latest → B (1:3)

B adds core identity/auth (OAuth, sessions, pseudonyms, trust weights) plus event projection rules and cleans up by externalizing durable; these are lasting features. A performs a URL canonicalization refactor (new url_rules crate + mechanical string updates across tests) that improves design but is primarily churn without new user-visible capability.