25bc4a1a70
docker-build-push / build-push (push) Successful in 6s
fetch_account_counts() was hitting the public /api/v1/accounts/:id endpoint, which 404s for any account that hasn't confirmed its email yet. Most flagged signups haven't confirmed at the moment account.created/approved fires, so the baseline snapshot silently failed and the account never entered suspicious_watch -- 6 of 8 IP-flagged signups to date missed the sweep entirely. Switch to the admin endpoint suspicious_sweep.py already uses successfully.