server: adopt lint block, fix clippy, fmt
Strip off-platform media from creator markdown (block tracking pixels)
ux: field-error highlighting, csrf guards, dead-code + doc cleanup (ultra-fuzz Run 4, A+)