feat: add sentinel dashboard roadmap and fix ci failures

- Deliver `docs/sentinel-dashboard-master-plan.md` and `docs/roadmap.md` with 2026-2035 roadmap and technical plan.
- Fix Netlify `_headers` and `_redirects` formatting (2-space indentation, single trailing newline).
- Refactor `backend/server.js` and `backend/models/User.js` to strictly adhere to Standard JS style and resolve duplication.
- Address Deno linting errors (unused vars, undefined vars, CSP quote syntax).
- Configure `deno.json` to exclude unrelated project directories from Deno checks.
- Integrate StaR-MoE stability thresholds into the governance monitors.

Co-authored-by: OneFineStarstuff <87420139+OneFineStarstuff@users.noreply.github.com>

Author: google-labs-jules[bot]

backend/server.js

@@ -18,16 +18,16 @@ const app = express()
 app.use(helmet({
   contentSecurityPolicy: {
     directives: {
-      defaultSrc: ['\'self\''],
-      styleSrc: ['\'self\'', '\'unsafe-inline\'', 'https://fonts.googleapis.com'],
-      fontSrc: ['\'self\'', 'https://fonts.gstatic.com'],
-      scriptSrc: ['\'self\''],
-      imgSrc: ['\'self\'', 'data:', 'https:'],
-      connectSrc: ['\'self\''],
-      frameSrc: ['\'none\''],
-      objectSrc: ['\'none\''],
-      mediaSrc: ['\'self\''],
-      workerSrc: ['\'none\'']
+      defaultSrc: ["'self'"],
+      styleSrc: ["'self'", "'unsafe-inline'", 'https://fonts.googleapis.com'],
+      fontSrc: ["'self'", 'https://fonts.gstatic.com'],
+      scriptSrc: ["'self'"],
+      imgSrc: ["'self'", 'data:', 'https:'],
+      connectSrc: ["'self'"],
+      frameSrc: ["'none'"],
+      objectSrc: ["'none'"],
+      mediaSrc: ["'self'"],
+      workerSrc: ["'none'"]
     }
   },
   hsts: {
@@ -93,7 +93,8 @@ app.get('/api/wheel/stages', async (_req, res) => {
 
 const PORT = process.env.PORT || 4200
 app.listen(PORT, () => {
-  process.stdout.write('Server running on port ' + PORT + '\n')
+  const msg = 'Server running on port ' + PORT
+  process.stdout.write(msg + '\n')
 })
 
 export default app