v0.3.10

What's changed

• CI: stop the CLA gate from silently ignoring a signature (#21)
• AI search: bound the result allocation by a constant, not a request value (#22)
• Keep id generation working on an insecure origin (#23)
• Security: patch fast-uri and browserslist advisories (#24)
• Frontend: make copy-to-clipboard work on an insecure origin (#25)

Platform notes

• Each archive contains just the self-contained hycanvas binary with the frontend embedded; see the README for setup (.env, PostgreSQL). The first-run wizard generates the configuration for you, and .env.example in the repository documents every setting.
• First run: ./hycanvas service start daemonizes the server (pidfile + logfile next to the binary; Linux, macOS, and Windows) and asks whether to set up in the browser or in the terminal. The browser wizard at /installation/step-1 is unlocked by the one-time access secret it prints; the CLI wizard asks the same questions right there. Other verbs: stop, restart, status, log -f. ./hycanvas start runs in the foreground.
• The macOS binaries are not signed or notarized. If macOS quarantines the download, run xattr -d com.apple.quarantine hycanvas or right-click the binary and choose Open.
• ffmpeg is only required for server-side video export; everything else works without it.

What's Changed

• Stop the CLA gate from silently ignoring a signature by @devadattas in #21
• Bound the search result allocation by a constant by @devadattas in #22
• Keep id generation working on an insecure origin by @devadattas in #23
• Patch fast-uri and browserslist advisories by @devadattas in #24
• Make copy-to-clipboard work on an insecure origin by @devadattas in #25

Full Changelog: v0.3.9...v0.3.10