M7: Hardening
Rate limits, upload hardening, headers, caps, no-PII audit, Puppeteer e2e, prod compose, real deploy. Build order: https://github.com/TimCane/bill-splitter/blob/main/docs/14-build-order.md#m7---hardening
No due date
100% Completed