If you discover a security issue, please report it to the repository owners privately.

Responsible disclosure: if you find a security vulnerability, please email security@example.com with details. Do not open an issue publicly.

This project does not assume Azure Key Vault. Provide secrets via environment variables, your platform's secret store (App Service/Container Apps secrets), or a secret manager of your choice. Do not commit secrets to the repository.