Implemented the StatServ overhaul.

Key changes:

• Collection restricted to registered S channels.
• Batched SQLite writes and incremental legacy cleanup.
• Configurable retention, prime time, and opt-in term collection.
• Guest/account identity separation.
• Secured stats reads and REPORT.
• Daily/weekly/hourly/5m reports plus REPORT OFF.
• Fixed LEAVE casing, ranking filters, aliases, dates, and N+1 queries.
• Added comparisons, peak users, weekday analytics, CSV export, and monitoring.
• Added focused persistence, collection, permission, API, and export tests
• TrojanScan & ProxyScan overhauls:
  

  Implemented the ProxyScan and TrojanScan hardening.

  • ProxyScan now requires repeated HMAC canary verification, runs probes inside bubblewrap, rejects private targets, and supports bounded background jobs.
  • TrojanScan now validates relay SIDs/live identities, uses scored signatures, deduplication, action caps, shared-IP safeguards, and audited access controls.
  • Added persistence, retention, metrics, migrations, safe configuration defaults, and documentation.
    
    

    Implemented all ChanFix and HelpServ improvements.

    • ChanFix now uses rolling operator samples, safe add-only recovery, cooldowns, split stabilization, dry runs, auditing, automation support, and direct C diagnostics.
    • HelpServ now has persistent tickets, roles, claims, priorities, notes, shifts, metrics, hierarchy-aware moderation, queue alerts, and invitation-only transfers.
    • Added migrations, configuration, documentation, web metrics, and command catalog entries.