- pin the four new sensitive setting keys (SMTP password, Discord
secret/bot token, VAPID keypair) in the encryption audit test so a
future drop from SensitiveSettingKeys fails CI
- bound account-channel digest drains strictly before the stamped
digest time so consecutive digest windows partition rows exactly,
instead of recapping rows created at or after the previous stamp
- keep the events websocket open when an event-frame snapshot fails,
matching the writeSnapshotFrame degrade-gracefully contract
- rename the seed task to Seed Content Availability to match its
episode+movie seeding behavior
- carry poster_source_path into realtime dispatch rows per the
DeliveryRow contract
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>