Fixed

• auth: run Argon2 password verification on the blocking pool #539
• k8s: pin ollama image to 0.30.0 and harden pod security #538
• worker: only suppress on Message-ID-verified ARF complaints #543