server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability
Ultra Fuzz Run 27: 32 of 33 audit items remediated
Split helpers.rs into formatting, crypto, rate_limit modules