Adds validated /timmy-staging base-path routing, scoped APIs/assets/service worker/storage/cookies, safe build health identity, loopback bind support, staging label, and /git isolation. Phase 1 only: Hermes remains disabled and this PR does not change Caddy or deploy.
Verified locally: 55/55 unit/security tests, root UI/photo/sleek browser suites, prefixed sleek suite, syntax/diff checks, and zero high dependency vulnerabilities.
Closes the first implementation slice of #53.
Adds validated `/timmy-staging` base-path routing, scoped APIs/assets/service worker/storage/cookies, safe build health identity, loopback bind support, staging label, and `/git` isolation. Phase 1 only: Hermes remains disabled and this PR does not change Caddy or deploy.
Verified locally: 55/55 unit/security tests, root UI/photo/sleek browser suites, prefixed sleek suite, syntax/diff checks, and zero high dependency vulnerabilities.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Closes the first implementation slice of #53.
Adds validated
/timmy-stagingbase-path routing, scoped APIs/assets/service worker/storage/cookies, safe build health identity, loopback bind support, staging label, and/gitisolation. Phase 1 only: Hermes remains disabled and this PR does not change Caddy or deploy.Verified locally: 55/55 unit/security tests, root UI/photo/sleek browser suites, prefixed sleek suite, syntax/diff checks, and zero high dependency vulnerabilities.
bac335a681to7e11154302