fix: resolve post-merge council audit blockers

[profilesearch]

Summary

• Apply payment-circumvention/content-safety checks to jobs and applications.
• Validate application portfolio_url to http(s) only and defensively render safe links in the employer applicant UI.
• Add the missing visible Clay/GTM QA Sprint card to starter offers.
• Fix homepage axe color contrast and stabilize browser test wait strategy.

Verification

• python3 -m unittest test_deep_audit_regressions.py test_diagnostics.py -> 94 OK
• python scripts/check_public_shell.py && python scripts/performance_budget.py -> OK
• npm run test:browser -> 19 passed, 1 skipped
• node --check /tmp/ghh_app_script_audit_fix.js -> OK
• git diff --check -> OK

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
gohire-humans	Building	Preview	Jul 4, 2026 3:50am