main
feat(security): add IP rate limiting, CSP & HSTS headers, audit logging, update deps, add tests & CI