openai/gpt-chat-latest → A (4:1)

Side A fixes a concrete security issue by sanitizing untrusted Reddit `body_html` with the `ammonia` library before every `maud::PreEscaped` render, adds a dedicated sanitization module, and includes tests verifying scripts and event handlers are stripped while benign markup is preserved. Side B introduces a broad Reddit import/event-log refactor, explicit fetch UI, dotenv support, and related plumbing, but it is a much larger architectural change whose core value is feature expansion rather than addressing an immediate correctness or security problem.