fix: restore security hardening compatibility and validation

Restore authorized rule reveal, explicit full HTTP capture and retention, video task business fields, and valid payment URLs. Add opt-in credential preservation for trusted recovery, fix frontend type contracts and async races, and eliminate PostgreSQL test fixture resource leaks. Document audit coverage and successful fmt and CI-scoped Clippy checks.

frontend/src/features/providers/components/codex-reset-credit-display.ts

@@ -277,7 +277,7 @@ export function getVisibleCodexResetCreditItems(
   if (!snapshot || !Array.isArray(credits)) return []
 
   return credits
-    .map((item) => {
+    .map((item): CodexResetCreditDisplayCandidate | null => {
       if (!codexResetCreditStatusIsDisplayable(item)) return null
       const remainingSeconds = codexResetCreditRemainingSeconds(item, snapshot, nowUnixSecs)
       if (remainingSeconds === null || remainingSeconds <= 0) return null