Adopt .well, .raised and .segment; the server used none of the three
Bump askama 0.13 to 0.16 across server and multithreaded
audit Run 15 Phase 5: CSP script-src drops 'unsafe-inline'