server: frontend hygiene — dead JS, fragmented tab JS, inline CSS, img shift
audit Run 15 Phase 5: CSP script-src drops 'unsafe-inline'
server: creator custom pages (HTML/CSS) on u.makenot.work