server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability
Fix remaining integration test failures from Audit Run 18
Add guest checkout, embeddable widgets, and trust audit fixes