multithreaded: chat routes
multithreaded: add the deleted-threads surface so a deleted thread can come back
multithreaded: adopt lint block, fix clippy, fmt
Remediate audit findings: SSRF userinfo bypass, guest role, C1 scope gaps