Blueprint Studio 2.5.2: Security Hardening and File Explorer Improvements

Security

• Restricted the Blueprint Studio backend, stream, and upload APIs to admin users, matching the admin-only panel.
• Blocked non-admin authenticated users from sensitive operations including file access, Git, SFTP, uploads, Home Assistant service calls, template rendering, and global search/replace.
• Hardened Git credential handling so credentials are no longer embedded directly into generated shell scripts or stored through Git's plaintext credential store.
• Changed terminal SSH key authentication to use in-memory Paramiko sessions instead of writing private keys to disk.
• Bounded legacy terminal command working directories to the Home Assistant config directory.
• API exception responses now return generic errors while detailed traces remain in server logs.
• Security report credited to anonymous.

Improvements

• Added donation support in the toolbar with Ko-fi, PayPal, Alipay, Bitcoin, and Solana options.
• Added inline create and rename controls in the file explorer.
• Added file explorer filter presets for All, YAML, Python, Images, and Modified files.
• Polished file explorer search with compact controls, result counts, highlighted matches, and no-results state.
• Added Git status badges in the file explorer.