fix(security): harden file access controls, webhook auth, and input bounds #4601

Bugbot Review

Bugbot Analysis Progress (8m 33s elapsed)

✅ Gathered PR context (6s)
✅ Completed bug detection (8m 26s)
✅ Posted analysis results (1s)

Final Result: Bugbot completed review - no issues found! ✅

Request ID: serverGenReqId_d36db485-94cc-4262-ae6b-18036df4ea49

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit af63a74. Configure here.}