Harden security, sync, and query subsystems
Frontend audit: 35 items resolved — race conditions, a11y, theme-aware CSS, security hardening
Audit remediation: observability, adversarial fixes, JS tests, sync hardening
Version bump to 0.2.1