v1.0.3

Launch-readiness patch release.\n\n- Security hardening and repository cleanup shipped in previous commit\n- Version bump to 1.0.3 for release/tag consistency