Audit Run 18: type safety, moderation types, sandbox fix, inline SQL extraction
Add HMAC auth to internal thread stats endpoint
Restructure into monorepo