Ewald
52db03fddf
refactor: reduce cyclomatic complexity at CI threshold and fix npm vulnerabilities
- Extract _finalize_saved_workflow from save_workflow (CC 25 -> 18)
- Extract browse/indexed-response helpers from handle_input_scope (CC 25 -> 18)
- Extract _hydrate_rating_tags/_rating_tags_missing from get_asset (CC 25 -> 11)
- Extract grouping/propagation helpers from backfill_job_ids_by_prefix (CC 25 -> <11)
- npm audit fix: nanoid 3.3.18 (high, infinite loop)
- bump brace-expansion override to 5.0.9 (high, DoS GHSA-rgw5-rvv9-x895)
Behavior preserved: 202 targeted Python tests pass, 806 JS tests pass,
quality gate (mypy/bandit/xenon/changed-file CC) passes.