v0.4.5.1

What's Changed

• osv: ignore GO-2026-5932 (x/crypto/openpgp, not imported) by @Yoshiofthewire in #83
• Add Go fuzz tests for client IP, trusted proxies, brand patch and media index by @Yoshiofthewire in #84
• Silver criteria: repeatable build, release verification, contributing and coding standard, assurance case by @Yoshiofthewire in #85
• ci: build with the Go version go.mod names by @Yoshiofthewire in #86
• Bind the CSRF token to its session by @Yoshiofthewire in #87
• docs: add license, contributing, security, and code of conduct by @Yoshiofthewire in #90
• Add OpenSSF Best Practices and Scorecard badges by @Yoshiofthewire in #91
• feat: unify Busnes console and truthful status presentation by @Yoshiofthewire in #93
• appearance: theme page for every role, no header select by @Yoshiofthewire in #95
• Let any signed-in admin run a manual backup deposit by @Yoshiofthewire in #94
• Sync ky-ui 0.4.1 classic theme catalog by @Yoshiofthewire in #96

Full Changelog: v0.4.5...v0.4.5.1