[Arthurdw]

• Score moves onto anonymizing networks (VPN, Tor, hosting) and look up city and network name.
• Emit security events only from the request that changed the session.
• Add client context to events; stored events are minimized by default.
• Deduplicate alerts per subject.
• Record app revocations as a revoked event; revoke_session now only deletes the subject's own session.
• Record where each session started (SessionOrigin), masked by default.
• Mark 0.2.x as the supported version in SECURITY.md.

Breaking for custom stores: delete_subject_sessions returns the deleted ids, and SessionRecord gains origin. The 0.2 migration adds the new columns.

[codecov]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

ℹ️ You can also turn on project coverage checks and project coverage reporting on Pull Request comment

Thanks for integrating Codecov - We've got you covered ☂️