Slingshot v0.3.2 - Auth transport hardening

Auth transport hardening

• Reject insecure OAuth callback URLs in production.
• Reject production auth and CSRF cookie configurations with secure: false.
• Reject SameSite=None cookies unless Secure is effective.
• Add regression coverage and clarify TLS-termination guidance.

Published package updates:

• @lastshotlabs/slingshot-auth@0.2.4
• @lastshotlabs/slingshot-oauth@0.2.3