Commands/Core: bucket review timelines in local time, cap manual time
Audit Run 14: tests, security hardening, JSDoc, date_utils extraction