Add NFC normalization to all FormData inputs across 41 server actions

All user-supplied string values from FormData now go through
String.prototype.normalize('NFC') to prevent Unicode homoglyph
attacks and canonicalization bypasses. NFC is idempotent for
already-normalized strings, so this is a pure security improvement
with zero behavioral change for legitimate users.

src/actions/applications.ts

@@ -28,7 +28,7 @@ export async function applyStaff(formData: FormData): Promise<void> {
   const rankId = Number(formData.get("rankId"));
   if (!Number.isInteger(rankId) || rankId <= 0) return;
 
-  const content = String(formData.get("content") ?? "")
+  const content = String(formData.get("content") ?? "").normalize("NFC")
     .trim()
     .slice(0, CONTENT_MAX);
   if (content.length < CONTENT_MIN) return;
@@ -72,7 +72,7 @@ export async function applyTeam(formData: FormData): Promise<void> {
   const rankId = Number(formData.get("teamId"));
   if (!Number.isInteger(rankId) || rankId <= 0) return;
 
-  const content = String(formData.get("content") ?? "")
+  const content = String(formData.get("content") ?? "").normalize("NFC")
     .trim()
     .slice(0, CONTENT_MAX);
   if (content.length < CONTENT_MIN) return;