Performance: fix email-search date filter, guard db-watcher clock underflow
Audit Run 14: tests, security hardening, JSDoc, date_utils extraction
Audit remediation: observability, adversarial fixes, JS tests, doc comments
Initial commit