v1.2.0 - login-web hardening

[1.2.0] - 2026-09-22

Security

• login-web.py hardening (closes #61) — the request-body read is capped at 64 KiB and an
  oversized/malformed Content-Length is rejected with 413 + connection close, so it can no longer
  exhaust memory; the shared session map is guarded by a threading.Lock.

Changed

• login-web.py — the bind address is configurable via LOGIN_WEB_BIND (default 0.0.0.0,
  still required to sit behind the SSO gate); login success is judged by LibationCli's exit status
  instead of scanning its output for "error"/"fail" (which flipped on benign strings like "0 errors");
  child processes are now reaped, fixing a zombie-process leak.