e9dac019ec
* Harden HTTP defaults and improve stop-server fallback * Tighten toggle update behavior and IPv6 loopback coverage * Remove external scan reference from README security section * Improve host parsing and local URL policy reuse