fix(sprint-S1.4): forbid_dtd=True + tests d'attaque XXE/Billion Laughs/DTD 2905909 unverified Claude commited on May 9
feat(migration): Phase 1 partielle — 3 modules core/ migrés vers canonique f3772fd unverified Claude commited on May 6