v1.2.1

Added

• CI Status: Added GitHub Actions CI badge to the README.
• Security: Added origin verification middleware to prevent CSRF on write endpoints (/api/download and /api/generate-snippet).

Changed

• API Errors: Standardized API error responses to return proper JSON objects ({"error": "..."}) and appropriate HTTP status codes (400, 404, 500) across all endpoints.

Fixed

• Security: Fixed a security vulnerability by binding the local Express server explicitly to 127.0.0.1 instead of all network interfaces (0.0.0.0).
• Error Handling: Fixed missing icon_id validation in the /api/svg endpoint, preventing bare string 500 errors.