fix: complete audit security and frontend gaps

apps/web/src/features/inbox/SuggestionList.svelte

@@ -1,9 +1,5 @@
 <script lang="ts">
-  export type Suggestion = {
-    kind: 'task' | 'note' | 'source';
-    title: string;
-    body: string;
-  };
+  import type { Suggestion } from './types';
 
   export let suggestions: Suggestion[] = [];
   export let onConfirm: (selected: Suggestion[]) => void;

apps/web/src/features/inbox/types.ts

@@ -0,0 +1,5 @@
+export type Suggestion = {
+  kind: 'task' | 'note' | 'source';
+  title: string;
+  body: string;
+};