v0.2.0 — security hardening

Full OWASP review fixes. See CHANGELOG.md for details.

v0.1.1

Fix wheel build — drop empty static/ force-include entry that broke uv build in CI; ship templates via artifacts.