fix(#411): complete auth/frontend remediation and review hardening
api
api
auth
orchestrator
security
testing
web
All checks were successful
ci/woodpecker/push/web Pipeline was successful