Security config

Code is the minimum security floor. Dashboard settings may strengthen that floor but cannot weaken it. Emergency lockdown is time-limited, reasoned, audited, and automatically expires.

Owners and admins can inspect incidents, resolve false positives, remove active IP blocks, and reset accumulated user-level deny state. Configuration changes keep an audit history.