Security Guardrails

Server-side credential storage, password hashing rules, and dashboard write-protection checks are wired here.