AbstractContinuum 0.3.2

Added

• About AbstractContinuum. The (i) button in the top-right cluster opens
  the AbstractFramework About dialog: the Continuum version you are running,
  the author and licence, links to the website, source, documentation,
  issue tracker and feedback, and the versions your gateway reports
  (AbstractGateway, AbstractFramework and its packages). If the gateway
  cannot say, the dialog shows why ("Gateway: unavailable (HTTP 401: …)").
  Needs AbstractGateway with the public GET /about route for the gateway
  rows.

Changed

• Requires @abstractframework/app-server 0.1.10 or newer (was 0.1.9), so the
  forwarding-header protection below is always present.
• package.json homepage points to https://abstractframework.ai and a
  bugs URL is set, both from the shared AbstractFramework descriptor.

Security

• With @abstractframework/app-server 0.1.10 or newer, the sign-in proxy
  sends the browser's connection address as X-Forwarded-For (browser-supplied
  forwarding headers are dropped) and the marker
  X-AbstractFramework-App-Proxy: abstractcontinuum on every gateway-bound
  request; a connection whose address is unknown is refused with HTTP 400.