max / makeover

Audit remediation, observability, infrastructure - Split server db/models.rs into 16 domain submodules (largest 384 LOC) - Add #[instrument(skip_all)] to all DB query functions (480 server, 259 MT) - MT: health endpoint now checks DB connectivity - PoM: correct false migration idempotency finding - Server: health endpoint returns database/git/mnw-cli subsystem checks - PoM: add SSH banner check type for monitoring SSH services - Deploy scripts updated for admin SSH on port 2200 - Server/MT/PoM audit reviews updated to grade A - mnw-cli: D1-D4,D6 server configuration complete (sshd port 2200, sudoers, firewall)