gp200editor

docs(changelog): drop (later) suffixes — parser regex requires bare ISO date

fix: full-codebase security review findings (flag enforcement, dep update, admin lock, avatar hardening) (#76)