v1.1.0

Fixed

• openai.OpenAI used as a context manager in all call sites (fixes EMFILE); admin nav/links shown via context processor.

Changed

• All timestamps shown in the user's local timezone.

Added

• Locust load-testing toolkit; configurable DB pool settings.

Security

• Per-endpoint rate limiting; default secret keys refused at startup; API keys stored as HMAC hashes; disabled users blocked; admins re-verified per request; refills via background task only.

Changed

• Package renamed illm → lumen.