v1.4.474

Changes

PR #2206 by ksylvan: fix: confine storage names and authenticate Ollama serve

• Reject unsafe cross-platform storage names and directory traversal attempts.
• Confine symlink targets to configured filesystem storage directories.
• Require API keys for non-loopback server bindings and authenticate Ollama routes.
• Validate chat pattern, context, and session names early while preventing internal filesystem details from leaking through client errors.
• Default the REST server to loopback port 8080 and add regression coverage for traversal, symlink, and authentication security.