- Replaced Intercom with Pylon and introduced memory analysis.sh for sizing diagnostics.
- Enhanced security with non‑routable IP filtering, local‑socket Caddy admin, path‑traversal validation, stricter permission checks, a non‑root Docker user, and patched MongoDB dependencies.
- Updated tooling: fixed Husky pre‑commit hook, allowed numeric CPU values in Helm charts, and removed the unused Supervisord admin port.