v2.1.6 — audit hardening

Floxum audit hardening (→ ≥95). Fail-safe tag filter (skips on a read error rather than flooding), job backoff() [30/120/300], a shared graphPost() helper (removes publishPhoto/publishLink duplication), dropped the unused SerializesModels, and added tsconfig.json + TypeScript devDeps.