v0.9.0

What's Changed

• chore(deps): bump esbuild to >=0.28.1 (Dependabot GHSA-g7r4-m6w7-qqqr) by @jo-duchan in #278
• Harden relay: cross-origin, CSRF, invite links, and upload handling by @jo-duchan in #279
• fix(relay): log handler exceptions instead of swallowing them by @jo-duchan in #280
• feat(relay): LAN HTTPS cert issuance for secure-context / WebCodecs (#232) by @jo-duchan in #281
• feat(relay): auto-publish LAN IP to domain A record (#232) by @jo-duchan in #282
• refactor(relay): DnsProviderRegistry for pluggable DNS providers (#232) by @jo-duchan in #283
• refactor(relay): namespace DNS/ACME credential env vars under TAPFLOW_ (#232) by @jo-duchan in #285
• docs(reference): document tls / LAN HTTPS configuration (#232) by @jo-duchan in #286
• fix(cli): wire trustedProxies/corsOrigins in relay start by @jo-duchan in #288
• feat(dashboard): surface Standard vs High performance + upgrade notice (#232) by @jo-duchan in #289
• fix(relay): exempt loopback origins from the CSRF guard by @jo-duchan in #290
• fix(dashboard): session panel width alignment, copy-link toast, recordings flicker by @jo-duchan in #291
• feat(relay): load DNS/ACME credentials from a gitignored .env file (#287) by @jo-duchan in #292
• chore(deps): resolve Dependabot security alerts via dependency bumps by @jo-duchan in #295
• Slim the dashboard bundle: variable fonts + visx charts by @jo-duchan in #296
• perf(relay): serve precompressed static assets (brotli/gzip) by @jo-duchan in #297
• perf(dashboard): route-level code splitting by @jo-duchan in #298
• chore(deps): bump hono to 4.12.25 and enable Dependabot by @jo-duchan in #299
• chore: release v0.9.0 — LAN HTTPS by @jo-duchan in #301
• fix(dashboard): add @types/d3-array to fix release build by @jo-duchan in #302

Full Changelog: v0.8.2...v0.9.0