openai/gpt-chat-latest → A (3:2)

Side A closes a significant security gap by changing vote identity resolution from anonymous fallback to fail-closed authenticated sessions, adds Secure cookie handling based on HTTPS, tightens return URL sanitization against open redirects, and gates mock OAuth behind an explicit test-only environment variable, with accompanying tests. Side B introduces a useful explicit Reddit import flow with event-sourced payload persistence and configurable API endpoints, but much of the patch is feature expansion rather than fixing correctness or security, making A's changes more durable to the project's integrity.