Audit remediation: indexes, observability, docs
Audit Run 14: tests, security hardening, JSDoc, date_utils extraction
Initial commit