Security release, closes #58.
- Share ids are now 128 random bits (32 hex). Existing 8-character links keep working.
/s/:idthrottles lookups of unknown ids (120/min per IP,429+Retry-After). Valid links are never throttled./api/streamvalidates the URL before the cache lookup, matching/apiand the MCP tools.SECURITY.mdadded; private vulnerability reporting enabled.
Full details in CHANGELOG.md.