0.3.0
0.3.0: Security hardening & token reliability - Parse JWT exp claim for token expiry (instead of hardcoded 24h) - Reduce refresh buffer from 1 hour to 2 minutes - HTML sanitization (nh3) to prevent stored XSS - Settings GUI redesign with Pensio branding - Mirror delete safety with source filtering - Simplified entry types (default to daily_journal) - Fix npm flatted DoS vulnerability