v0.1.2

What's Changed

Fixed

• Topic validation hardened — replaced the "/" in topic or ".." in topic contains-check with a strict allowlist regex ^[a-zA-Z0-9_-]{1,64}$. The previous guard was bypassable via URL-encoded characters (%2F, %2E%2E) that reverse proxies may decode before forwarding to ntfy. Two new tests cover the encoded variants.
• Dockerfile runs as non-root — appuser (uid 1001) added via USER instruction.

See CHANGELOG.md for the full history.