refactor: dead-code cleanup + calibrated knip + blocking knip CI gate (#43)