Block a user
[P17] Add --close mode to api.diag.vuln for auto-closing resolved vulns
[P17] Add hardening pipeline — block on HIGH/CRITICAL, auto-close vuln issues
[P17] Harden api image — apt upgrade, non-root, HEALTHCHECK
[P17] Harden notebooks image — apt upgrade, non-root, HEALTHCHECK
P17: Hardened containers — auto-patch vulns via CI/CD
P17: Hardened containers — auto-patch vulns via CI/CD
[P17] Add --close mode to api.diag.vuln for auto-closing resolved vulns
[P17] Harden notebooks image — apt upgrade, non-root, HEALTHCHECK
[P17] Harden zotero image — apt upgrade, pin deb source, HEALTHCHECK
[P17] Harden docs image — pin nginx, non-root, HEALTHCHECK
[P17] Harden api image — apt upgrade, non-root, HEALTHCHECK
[P17] Add hardening pipeline — block on HIGH/CRITICAL, auto-close vuln issues
Add WebDAV service backed by RustFS S3 for Zotero file sync
[P9] Distribute Homelab CA cert to Docker and buildkit
[P16] RCA: Provision never ran — credential rotation broken from inception
[P9] Auto-open Gitea issue on any CI build step failure
[P9] Use FQDN registry refs for all container images