🚀 Release: master ⬅️ staging

[communityfix]

Release PR from staging to master.

• chore(security): suppress fallow complexity re-attribution on createCaseStudy
• 🔒 fix(security): harden links, email-PIN, and AI moderation

[github-actions]

🧹 Code quality

Check		Summary
vize lint	✅	0 errors · 342 warnings
vize format	✅	all files formatted
fallow audit	❌	fail · 0 dead-code · 119 complexity · 0 dupes (169 files)

fallow audit output

  server/routes/auth/google.get.ts
    :2 onSuccess
           5 cyclomatic    4 cognitive   13 lines
          30.0 CRAP
  server/api/admin/issues/[id]/reject.post.ts
    :5 default
           5 cyclomatic    4 cognitive   44 lines
          30.0 CRAP
  app/pages/dashboard.vue
    :29 firstName
           5 cyclomatic    1 cognitive    1 lines
          30.0 CRAP
  server/api/issue/[id]/members.post.ts
    :9 default
           5 cyclomatic    2 cognitive   23 lines
          30.0 CRAP
  app/pages/onboarding.vue
    :56 goTo
           5 cyclomatic    3 cognitive    5 lines
          30.0 CRAP
    :98 fetchErrorMessage
           5 cyclomatic    1 cognitive    4 lines
          30.0 CRAP
  app/components/user/InterestsEditor.vue
    :63 fetchErrorMessage
           5 cyclomatic    1 cognitive    4 lines
          30.0 CRAP
  app/pages/settings.vue
    :8 fetchErrorMessage
           5 cyclomatic    1 cognitive    4 lines
          30.0 CRAP
  Functions and synthetic template or component entries exceeding cyclomatic, cognitive, or CRAP thresholds (https://docs.fallow.tools/explanations/health#complexity-metrics)
  To suppress inline templates: // fallow-ignore-next-line complexity (above @Component)
  To suppress: // fallow-ignore-next-line complexity

✗ 119 above threshold · 879 analyzed (0.01s)
note: skipped 26 files matching default duplicates ignores (use --explain-skipped for the list)
note: hid 32 clone groups below minOccurrences=3 (lower --min-occurrences to see them)
✗ complexity: 119 findings · 168 changed files (0.50s)
  audit gate excluded 79 inherited findings (run with --gate all to enforce)

_{updated for f676c7b · run #275}