v0.1.4

What's Changed

• fix(auth): harden loopback login server (CSRF, DNS-rebinding, info-hygiene) by @vargahis in #37
• chore(ci): bump actions/* off deprecated Node 20 runtime by @vargahis in #38
• feat(transactions): add clear_notes/clear_goal flags to update_transaction by @vargahis in #39

Full Changelog: v0.1.3...v0.1.4