Stronger data protection

Keep workspace data behind stricter server-side access controls.

Quantprove now denies direct public access to workspace tables by default and keeps customer data behind authenticated server routes. The stricter policy applies across existing product workflows without changing how you use them.

Authentication, webhook handling, dependency checks, response headers, and secret scanning were hardened in the same release.