v1.2.0

• Fixed the container health check, which reported every installation as
  unhealthy while the application was serving requests normally. It asked for
  localhost, which resolves to ::1 as well as 127.0.0.1 inside the
  container, while the server listens on IPv4 only. docker ps showed
  (unhealthy) permanently, monitoring alerted on a healthy app, and
  depends_on: condition: service_healthy could never be satisfied.
• Changed ADDRESS_HEADER to be off by default. It makes the app read the
  client address from a forwarding header, which is right behind a reverse
  proxy and wrong on a directly reachable installation, where the caller writes
  that header and can pick the address the per-IP PIN brake counts against.
  Whoever runs the app behind a reverse proxy has to uncomment
  ADDRESS_HEADER and XFF_DEPTH in docker-compose.yml after updating,
  otherwise every visitor counts as the proxy and the brake locks the whole
  household out together. The app now logs at startup which of the two it is
  doing.
• Added an Unraid Community Applications package, so the app can be installed
  from the Unraid app store. It lives in packaging/ alongside a consistency
  check and an install test that runs the container the way a store does.
• Completed the ARM64 documentation: the ready-made image has been published for
  linux/amd64 and linux/arm64 for a while, but one installation guide still
  claimed otherwise and sent ARM and NAS owners into an unnecessary local build.
• Added a star request to the project website and narrowed the CodeQL scan to
  the source, which had been reporting findings in bundled dependency code.