fix(security): tighten CORS defaults, enforce secure secrets, migrate token hashing#124

Closed

mojomast wants to merge 3 commits intodevfrom

followup/pr124-auth-security

Commits on Feb 14, 2026

feat(proxy): add multi-user auth, API key management, usage attribution, and UI
mojo-opencode
committed
test(devops): add MVP regression suite and deployment migration docs
mojo-opencode
committed
fix(security): harden CORS and secrets, migrate API key hashing to HMAC
mojo-opencode
committed