Security hardening sweep: fuzzing, headers, host sandbox (#28) !28

merged merged by cmc on 2026-08-25 00:42 UTC · krz/gitbay:security-sweep into main