Commit history for src/server/api
- Harden the editor after review: CSP sandbox, capped bodies, .gitattributes LFS and symlink guards, PAT and sign-out revocation, PR scope and failure handling, hotkey limited to ref pages.4be272d⌁taigrr committed
- Let PATs mint capped editor sessions for agents, fix new-branch web commits pushing a stale old SHA, and add an editor e2e script.6a8890c⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
