fix: review feedback — drop inflated X-Total-Count for PRs, remove redundant curl, use textContent

- Remove X-Total-Count header override for prs_merged_total: header counts
  all closed PRs (including unmerged/rejected), inflating the dashboard metric.
  Keep the jq-filtered count from the 50-item page instead.
- Remove redundant first curl in backlog_count that discards its response.
- Use textContent/createElement instead of innerHTML for project names.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

site/dashboard.html

@@ -420,7 +420,10 @@
           data.projects.forEach(function (p) {
             var card = el('div', 'project');
             var nameDiv = el('div', 'name');
-            nameDiv.innerHTML = '<a href="https://codeberg.org/' + p.repo + '">' + p.name + '</a>';
+            var nameLink = document.createElement('a');
+            nameLink.href = 'https://codeberg.org/' + p.repo;
+            nameLink.textContent = p.name;
+            nameDiv.appendChild(nameLink);
             card.appendChild(nameDiv);
 
             var metricsDiv = el('div', 'metrics');