v0.2.7
Security hardening: removed guessable sequential demo keys (SUB-0000-0001 etc.) from the offline fallback and revoked them server-side. All customer keys now live in Supabase only, crypto-random + unguessable (PREFIX-XXXX-XXXX-XXXX). Keys carry a name + validity (1/3/6/12 months). New PIN-gated /admin web console issues + revokes keys.