Allow clients to rotate authentication proofs through a hashed recovery key without exposing plaintext secrets.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Reject unconfigured browser origins while preserving native clients without an Origin header.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add the PostgreSQL-backed authentication, opaque blob synchronization, WebSocket notifications, and local development stack.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>