chore: 2nd-pass audit catches — SSRF guard tests, theme_url scope, defense-in-depth#38

heznpc merged 2 commits into

mainnewtria/ProfileKit:mainfrom

chore/2nd-pass-audit-2026-05-21newtria/ProfileKit:chore/2nd-pass-audit-2026-05-21Copy head branch name to clipboard