Potential experiments

fix(auth): correct mfa errors, sudo methods and birth dates

fix(api): correct guild permission and mfa checks

fix(media-proxy): correct route errors and test the ip gate

fix(media-proxy): bound the relay body and drop the unread ttl

chore(gateway): delete modules with no callers

fix(gateway): return precise rpc errors and bound snowflakes

fix(gateway): close oversized bot identify with code 4011

feat(gateway): add an undrain endpoint and sweep orphan tables

fix(gateway): resync permissions and validate voice leaves

fix(gateway): repair the session lifecycle, limits and dead code

fix(api): resolve missing user rows for webhooks and sessions

fix(api): resolve missing user rows for webhooks and sessions

fix(api)!: align error codes with throw sites and image bounds

fix(api): answer 403 when the client ip header is unparsable

fix(api)!: always send Retry-After and reclassify two limits

fix(api)!: correct declared bounds and hide public bot mfa

fix(api)!: always send Retry-After and reclassify two limits

fix(api)!: correct declared bounds and hide public bot mfa

feat(self-host)!: rework the compose stack and demand secrets

fix(config)!: validate and derive config, drop the unread keys