Security policy This is a reference template. Do not put secrets in VITE_* variables or static config. Report vulnerabilities through GitHub security advisories.