Run #14 remediation: governor sweeper, scan/storage/payments hardening
server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability