callback-guard

feat: tighten strict request validation checks

fix: bump Go toolchain patch for stdlib vulnerabilities

feat: validate security config and bound tunnel/auth behavior

chore: update GitHub Actions to latest majors

feat: add security gating and runtime hardening opt-ins