fix: strict mode, test stubs, pagination counts, N+1 queries, CSP hardening

feat: initial open-source release