Security

Status: stub — to be filled.

Will cover:

• API key handling and rotation
• Transport security and webhook signing (when webhooks ship)
• Tenancy isolation (org-scoped data)
• How to report a vulnerability