Security

Security overview covering authentication, protected app routes, DB persistence, rate limiting, security headers, audit logs, and webhook signature verification.

This is placeholder legal infrastructure for product readiness, not legal advice and not attorney-approved text. Replace before production launch.