73e57d1cf1
Add CORS, referrer policy, and content-type security headers. Configure logger to track real client IP in reverse-proxy setups via Forwarded / X-Forwarded-For / X-Real-IP headers. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Stanislaw Grams <sjg@haxx.space>