fix(session-cookie): migrate to __Host- prefix for secure contexts (#294)

feat(refactor): ready for manual QA after main sync (#274)

feat: phase 1 workspace isolation across auth and core APIs (#112)

fix: healthcheck auth, secure cookie auto-detect, model object crash (#84)

feat: initial open-source release