Address pr-swarm finding: both logins copied crop, store and flush, had diverged, decoded every avatar twice, and imaging.Fill cloned images thinner than 100 px at full resolution outside the decode budget.