Fix: KML invalid-XML chars rejected by Google My Maps

Fix: chatbot prompt no longer hardcodes a (wrong) post count

Fix: chatbot get_prompt KeyError (500 on Prepare extraction file)

#19: public-URL hardening

#18: extend guardrail test for client-geocode + set-coords

Demarcate the two deployment modes + add guardrails, CLAUDE.md