replace Redis with an embedded SQLite string->string KV store (group commit, in-tx events, SQL search)

internal/identity/verify.go

@@ -56,7 +56,7 @@ func ValidAction(a Action) bool {
 }
 
 // ValidUID exposes the uid shape check to callers outside this package (the
-// API layer, which must reject a hostile uid before it reaches a Redis SCAN
+// API layer, which must reject a hostile uid before it reaches a key-range read
 // pattern or a file path).
 func ValidUID(uid string) bool { return validUID(uid) }