Security: archived repositories are read-only for all content mutations (AZ-A10); limitWrite on every mutating fn and API handler, star webhook fan-out behind a limiter, fork honours the owner repo cap (AZ-A11)
33 files changed+221−65
Rendering diff…