v0.1.0-rc.21

What's Changed

• fix(config): reject credentials pasted into non-secret fields; never echo them (#172) by @evertramos in #173
• docs(security): data-flow reference — every outbound connection, fully-local mode (#179) by @evertramos in #233
• ci(docs): sync docs/content from dev to ezy-shield-site dev branch by @evertramos in #237
• docs: product voice for user guides — no issue refs, no real hostnames/zones by @evertramos in #241
• feat(cloudflare): capability preflight — plan quota, list create-or-adopt, doctor checks (#234) by @evertramos in #238

Full Changelog: v0.1.0-rc.20...v0.1.0-rc.21