Security release with hardening improvements: - Rust: Enforce minimum 32-byte secret key for HMAC-SHA256 - TypeScript: Default to sessionStorage for better security - TypeScript: Add HTTPS URL validation - Gateway: Redirect URI validation against registered callbacks - Docker: Bind to localhost only by default