v1.2.8

What's Changed

• fix(backend): require API token, restrict CORS origins and Host header by @devin-ai-integration[bot] in #7
• Add SECURITY_MODEL.md threat model by @devin-ai-integration[bot] in #8

New Contributors

• @devin-ai-integration[bot] made their first contribution in #7

Full Changelog: v1.2.7...v1.2.8