fix(lx): count guest posts by author so a site cannot get stuck on guest slots

[ralyodio]

A guest post is stored under the partner's site_id with the writer in
author_site_id. isGuestPostSlot and the partner cooldown both filtered by
site_id, so neither ever saw the guest posts a site wrote:

• the cadence count never moved once it sat at 9 mod 10, so every slot
  became a guest slot for ever. pairux.com has published nothing to its
  own blog since 2026-08-19.
• the 30-day cooldown found nothing, so pairux wrote the same
  "screen sharing software development" post for one partner 17 times.

Count the site's own posts plus the guest posts it authored, and look up
the cooldown by author_site_id. The test stub now records its filters so
the column choice is pinned.

🤖 Generated with Claude Code

[github-actions]

ThreatCrush Security Scan

48 finding(s)

HIGH/CRITICAL: 2 | MEDIUM: 31 | LOW: 15

Severity	Rule	Location
HIGH	tls-verification-disabled	lib/onion.ts:48
HIGH	secret-generic-credential	lib/sp/platforms/facebook.ts:32
MEDIUM	js-unescaped-html-sink	app/(app)/dashboard/admin/email-broadcast/EmailBroadcastForm.tsx:125
MEDIUM	js-unescaped-html-sink	app/(app)/dashboard/projects/[id]/autoblog/articles/[articleId]/page.tsx:214
MEDIUM	js-unescaped-html-sink	app/(marketing)/blog/[slug]/page.tsx:67
MEDIUM	js-unescaped-html-sink	app/(marketing)/blog/[slug]/page.tsx:97
MEDIUM	js-unescaped-html-sink	app/(marketing)/blog/[slug]/page.tsx:104
MEDIUM	js-unescaped-html-sink	app/(marketing)/blog/[slug]/page.tsx:110
MEDIUM	js-unescaped-html-sink	app/(marketing)/recent/page.tsx:186
MEDIUM	js-unescaped-html-sink	app/(marketing)/recent/page.tsx:190
MEDIUM	js-unescaped-html-sink	app/c/[project]/[slug]/page.tsx:77
MEDIUM	js-unescaped-html-sink	app/c/[project]/page.tsx:57
MEDIUM	js-unescaped-html-sink	app/careers.js/route.ts:228
MEDIUM	js-unescaped-html-sink	app/careers.js/route.ts:285
MEDIUM	js-unescaped-html-sink	app/layout.tsx:128
MEDIUM	js-open-redirect	app/login/form.tsx:39
MEDIUM	js-unescaped-html-sink	app/r/[token]/page.tsx:176
MEDIUM	js-open-redirect	app/signup/form.tsx:43
MEDIUM	js-open-redirect	components/billing/buy-credits-modal.tsx:98
MEDIUM	js-unescaped-html-sink	components/json-ld.tsx:8
MEDIUM	js-unescaped-html-sink	components/report/markdown-view.tsx:15
MEDIUM	js-unescaped-html-sink	lib/careers/page-templates.ts:198
MEDIUM	js-dynamic-code-execution	lib/crawl-limits.ts:67
MEDIUM	redos-nested-quantifier	lib/emailMarkdown.ts:41
MEDIUM	redos-nested-quantifier	lib/emailMarkdown.ts:324
MEDIUM	redos-nested-quantifier	lib/lx/articleGen.ts:100
MEDIUM	redos-nested-quantifier	lib/tracker/agent-gate.ts:61
MEDIUM	sh-predictable-temp-path	ops/selfhost/server/setup-supabase.sh:218
MEDIUM	sql-template-interpolation	scripts/detect-slot-themes.ts:31
MEDIUM	sql-template-interpolation	scripts/purge-constructed-keywords.ts:163
MEDIUM	sql-template-interpolation	scripts/purge-offniche-keywords.ts:124
MEDIUM	js-dynamic-code-execution	scripts/test-crawl-limits.mjs:14
MEDIUM	js-dynamic-code-execution	scripts/test-crawl-limits.mjs:24
LOW	secret-generic-credential	app/(marketing)/docs/autoblog-webhook/page.tsx:150
LOW	secret-generic-credential	lib/sp/platforms/linkedin.ts:25
LOW	js-dynamic-code-execution	tests/careers-page-templates.test.ts:21
LOW	js-dynamic-code-execution	tests/careers-widget-script.test.ts:19
LOW	js-dynamic-code-execution	tests/careers-widget-script.test.ts:69
LOW	js-dynamic-code-execution	tests/contract/ad-visitor-id.test.ts:51
LOW	js-dynamic-code-execution	tests/contract/ad-visitor-id.test.ts:52
LOW	js-dynamic-code-execution	tests/contract/ads-click-cooldown-redis.test.ts:20
LOW	js-dynamic-code-execution	tests/contract/ads-click-cooldown-redis.test.ts:24
LOW	js-dynamic-code-execution	tests/contract/ads-click-cooldown-redis.test.ts:25
LOW	js-dynamic-code-execution	tests/contract/ads-click-cooldown-redis.test.ts:26
LOW	js-dynamic-code-execution	tests/contract/ads-click-cooldown-redis.test.ts:31
LOW	js-dynamic-code-execution	tests/contract/ads-click-cooldown-redis.test.ts:35
LOW	secret-generic-credential	tests/contract/posthog-integration.test.ts:13
LOW	secret-generic-credential	tests/lead-campaign.test.ts:16

Snippets are redacted; ThreatCrush never prints matched credential material.