fix: SEO lib uses dynamic OG route as default image (fixes missing og-image.png)

fix: add HTML sanitization to prevent XSS in user-generated content

fix: rate limiter now supports semantic search burst limits + better cleanup

feat: add environment variable validation with clear startup errors

Automated sync to Hugging Face