fix(SEARCH-2,SEARCH-3): add datagov/crimereport filter buttons; add Arabic script U+0600-U+06FF to ALLOWED_CHARS for Urdu/Sindhi search

fix(BACKEND-1): move rate limiter eviction AFTER current key pruning -- prevents losing rate-limit tracking on burst-after-idle patterns

fix(H-05): rate limiter eviction uses ts[0] (oldest) not ts[-1] (newest) -- prevents sliding window bypass attack

fix(NEW-A3 part1): replace em-dashes/smart-quotes in 56+ Python files -- CI requires pure ASCII source

fix(BUG-13/14): audit_logger uses per-process file; rate_limiter evicts stale windows

fix(BUG-09): removed IGNORECASE — 'Union Bank' and 'Call Centre' no longer blocked

feat(security):complete — security hardening and provenance