code review: correctness follow-ups post #414/#445 (dev vs main)

[ZhuchkaTriplesix]

Summary

Bugbot general code review of dev vs main after perf #414 + UI #445 (2026-07-27).

Child issues

Sev	Issue	Topic
High	#464	injectSqlLimit string-literal false positive
Medium	#465	Export failure leaves partial file
Medium	#466	PG tree shows stale objects with error
Medium	#467	Theme watcher drops in-flight refresh
Low	#468	Redis keys error banner never clears

Canvas: code-review-dev-vs-main.canvas.tsx

Goal

Ship High first. GitFlow: dev → issue/<n>-<slug> → PR Closes #<n>.

[ZhuchkaTriplesix]

Fixed in #469 (merged to dev).