Release v0.2.24

What's Changed

🐛 Bug Fixes

• fix(server): safer public URL resolution, configurable OAuth redirect, real /health version (033cef8)
• fix(auth): harden encryption key validation, OAuth HMAC, and fail-closed middleware (e1df81e)
• fix: coalesce token refresh, correct circuit breaker accounting, re-inject auth on retry (49aeae6)
• fix: stream export downloads with enforced size cap (89de04e)
• fix: contain download tool paths to active profile (73520f8)

🔧 Other Changes

• Merge pull request #58 from KuudoAI/fix/security-and-correctness-top5 (5b94bb3)

What's Changed

Other Changes

• fix: security and correctness top5 by @tspicer in #58

Full Changelog: v0.2.23...v0.2.24