refactor: remove dead code and unused exports

Delete proxy-auth.ts, types/index.ts, staff-user.ts+test, local-imports.ts+test (only used by their own tests). Remove unused foundation exports: sanitizeFilename, canonicalizeFormValue, canonicalizeFormData, ConflictError, getRequestStore, getClientIp, elapsed. Remove stale TODO comments from rank-authority.ts and notice.ts. Fix biome lint warnings in catalog-repair.ts.

src/lib/foundation/security.ts

@@ -208,50 +208,6 @@ export function sanitizeField(
 	return s.slice(0, maxLen);
 }
 
-const INVALID_FILENAME_CHARS = /[<>:"/\\|?*]/;
-
-function removeControlChars(s: string): string {
-	let result = "";
-	for (let i = 0; i < s.length; i++) {
-		const code = s.charCodeAt(i);
-		if (code >= 32) result += s.charAt(i);
-	}
-	return result;
-}
-
-// TODO: Check of dit weg kan — niet geïmporteerd in de codebase
-export function sanitizeFilename(name: string): string {
-	return removeControlChars(
-		name
-			.normalize("NFC")
-			.replace(INVALID_FILENAME_CHARS, "")
-			.replace(/\.\.(?:\/|$)/g, ""),
-	)
-		.trim()
-		.slice(0, 255);
-}
-
-export function canonicalizeFormValue(
-	value: FormDataEntryValue | null,
-	maxLen?: number,
-): string {
-	const s = canonicalize(String(value ?? ""));
-	return maxLen ? s.slice(0, maxLen) : s;
-}
-
-// TODO: Check of dit weg kan — niet geïmporteerd in de codebase
-export function canonicalizeFormData(
-	formData: FormData,
-	fields: Record<string, number | undefined>,
-): Record<string, string> {
-	return Object.fromEntries(
-		Object.entries(fields).map(([key, maxLen]) => [
-			key,
-			canonicalizeFormValue(formData.get(key), maxLen),
-		]),
-	);
-}
-
 export async function extractClientIpAsync(): Promise<IpAddress> {
 	try {
 		const h = await headers();