Rails tech debt audit

Report only; edit code only if the user asks. A short report of confirmed problems beats a long report of maybes.

Every finding