fix: harden web runtime and follow-up auth/db security fixes #21

Merged

sirily merged 4 commits from fix/api-runtime-security-controls into master

2026-03-11 16:28:56 +03:00

Author	SHA1	Message	Date
sirily	0c05b091d0	fix: scope generation idempotency per user	2026-03-11 14:01:16 +03:00
sirily	348f197d99	fix: stop logging password reset secrets	2026-03-11 14:01:16 +03:00
sirily	f404c36ed1	fix: close remaining web api security gaps	2026-03-11 13:23:15 +03:00
sirily	24e3aa0bc0	fix: harden web API runtime controls	2026-03-11 12:48:10 +03:00