fix: allow cloudflare pages domain in CORS

perf: reduce egress by caching stats endpoints longer and limiting getChatMessages

feat: add backfill resume support and session/retry fixes for VODs

feat: automatic VOD ID resolution for stream sessions and historical pending streams

fix: production oauth redirect to frontend host

feat: add Better Stack webhook receiver for Telegram alerts

feat: smart gap detection and user roles sync backfill improvements

feat: smart gap detection with coverage windows - track exact time ranges captured per stream

feat: global roles migration, VIP badges, role backfiller script

Optimize KPI cards to request overall stats summary from /api/stats/summary and display true totals.

Optimize message ingestion with logChatMessagesBatch: bulk upsert to database.

Integrate stream-start and stream-end signaling in worker.py and add /api/log/stream-start endpoint.

feat: map truncated 'кримб' to 'кримбр'

feat: add more synonyms for кримбр

feat: tune Whisper settings and add word mappings

security: sync CORS and error handling security updates in main repo

feat: implement caching, rate limiter, and security headers (CSP) for decoupled deploy

chore: handle missing client dist path gracefully in server

chore: disable EventSub listener in server

feat: prepare transition to decoupled hosting (Render + Netlify + Supabase)