- Config validation: reject newlines/null bytes in git author/committer names
- Protected branch guards on git_push (force/delete) and git_reset (--hard)
- CORS wildcard warning in production, removed environment from public /mcp endpoint
- Removed unused escapeShellArg utility