root d04901d296 security: fix 9 vulnerabilities + OrdersTable 14px font + colored status badges ... Security fixes: - Remove VITE_SUPABASE_SERVICE_ROLE_KEY from Docker build args - Add missing security.ts functions (verifyInternalRequest, requireSameOrigin, etc) - Store only OTP hash, remove plaintext otp_code - Fix CORS origin check: startsWith → exact match - Use atomic SQL check_rate_limit RPC instead of JS rate limiter - Mask PII in get_delivery_invitation_by_token single-order path - Add RequireAuth wrapper for protected routes - Revoke anon execute on confirm_delivery_choice_by_token - Add HSTS header to Caddyfile UI: - OrdersTable desktop: all cells text-sm (14px) - Status column: use colored Badge with tone from getOrderGroupStatusTone - Header row: text-sm (14px)		2026-06-19 12:14:19 +00:00
..
api	feat: requires_address status + address input for pickup-to-delivery switch	2026-06-10 14:52:17 +00:00
functions	security: fix 9 vulnerabilities + OrdersTable 14px font + colored status badges	2026-06-19 12:14:19 +00:00