fix: resolve MEDIUM audit items (M4-M17)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>