feat(sprint-S1.5+S1.6+S1.7): tests d'attaque ZIP slip / SSRF / CSRF + durcissement validate_http_url

docs(sprint-H.8): cleanup obsolete legacy/shim language in production docstrings

feat(8): importers IIIF/Gallica/eScriptorium → adapters/corpus/

feat(migration): Lots H + I + J — statistics, htr_united/huggingface, MetricsResult

chore: untrack 4 stray .pyc files

refactor(adapters): Sprint A14-S11 — migration des adapters LLM + 2 importers corpus

feat(architecture): Sprint A14-S3 — squelette nouvelle architecture + tests d'invariants