max / makenotwork

Give the mt-db submodules and the flagging suite headers Thirty query and mutation submodules carried no //! at all, including the five largest, so the only way to learn what a file covered was to read its function list. Each gets a one-liner, and where a module carries an invariant the line names it rather than the subject matter: post and thread reads say their by-id loaders return Unscoped so the C1 community check cannot be skipped, membership upserts say idempotent, read-position advance says never backwards, auto_hide_if_threshold_met says exactly once under concurrent flaggers. Each of those was read against the SQL before being written down. flagging.rs is 1009 lines mixing four separate security properties with no header. Name them, and say why restore is tested alongside removal: they share the cascade, and a restore that does not resolve the flags rehides the post immediately. The C1 scope rule was written out three times, in queries/mod.rs, in routes/scope.rs and in clippy.toml, and had already drifted. Two of the three said "the few sanctioned call sites" where there is exactly one, in routes/internal.rs. Keep routes/scope.rs as the canonical account, since it is the fullest and clippy.toml already pointed at it, and cut the other two back to what is local to them. Also fixes three broken rustdoc links found while checking the new headers render: two sibling-module references in mutations/post.rs that needed super::, and a public doc linking a private item in mutations/user.rs. Pre-existing, unrelated to the headers, cheap here.