Ship It: Auth & Security

Production security hardening for Next.js apps. Covers authentication flows, authorization middleware, input validation, rate limiting, CSRF protection, security headers, and common vulnerabilities. Builds on scaffold + database.