Fix user-visible glyphs and seed copy in multithreaded
Remediate audit findings: SSRF userinfo bypass, guest role, C1 scope gaps