server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability
server: parallel path-based entries on structural + signing layers
server: rewrite scan pipeline (async + dashboard + 5 new layers)