server: restructure the frontend into a typed core lib + custom-element islands
Remediate audit Run 21 findings across server