openai/gpt-chat-latest → A (4:1)

Side A fixes a concrete security vulnerability by introducing HTML sanitization with the `ammonia` library, routing all `body_html` rendering through `entity_body_html`, and adding tests that verify scripts and event handlers are stripped while preserving safe markup. Side B mostly removes the demo counter and refactors ranking updates into a settlement worker with cached reads, which is a useful architectural change but does not address as fundamental or broadly lasting a correctness issue as preventing XSS from untrusted Reddit HTML.