2.8 - Kanban Board, MySQL Gateway, Security Hardening

New Features

• Board (Kanban) view — draggable cards in status lanes with instant updates and audit trail
• MySQL Gateway — auto-discover columns, handle non-standard PKs, External Tables tab, re-sync API
• Linked record count badges on grid expand buttons
• Calendar API optimized (query visible month only)

Security

• Ownership guards on mass operations and calendar drag-and-drop
• Random setup password (no more hardcoded admin/admin)
• Session file protection (.htaccess on storage/sessions/)
• File uploads stored outside web docroot
• Config import validation (size limits, empty archive rejection)
• Error messages hardened (no database leak)

Infrastructure

• Web-root restructure: public/ is docroot, backend outside
• Cypress suite overhauled (18 specs, seed endpoint, admin tests active)
• CI: source integrity checks, version tag validation, PHP 8.1–8.3
• Docs updated (6 languages, MySQL Gateway section)