World-class hardening: enforce type-checking, clear CVEs, tighten permissions, polish editor#2

DCCA merged 8 commits into

mainDCCA/shotback:mainfrom

claude/exciting-mccarthy-l225qlDCCA/shotback:claude/exciting-mccarthy-l225qlCopy head branch name to clipboard