Import flow rewrite

• A reworked statement import pipeline with clearer previews, duplicate detection, and per-account handling on the path to the unified import surface.

Rules engine v2

• Auto-categorization rules moved to structured JSONB conditions and actions, supporting richer matching and multiple action kinds.

Security hardening

• A stricter nonce-based Content Security Policy with strict-dynamic and no unsafe-inline in script-src.