v0.1.12

Changelog

• 1dc67cd fix(api): enforce ownership on multi-client command job reads (#26)
• 7b4b2dd fix(api): prevent path traversal via file upload id (#27)
• c7971b3 fix(frontend): align and space the create-tunnel form columns (#29)
• d5943ab fix(security): stop trusting X-Forwarded-For by default in RemoteIP (#28)