Security hardening: sealed identity, 8-digit check, allow-lists, dependency audit Document the identity key sealed with the Android Keystore and kept out of backups, the 8-digit comparison code, the relay-only code for messages, the SVG allow-list, manifest limits, mutation tests, pinned actions and the weekly dependency audit. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Icons page, tag icons, game table catalogue v4 (phantom poison and arrows, notes on cards), replay and loading fixes