fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

web/src/main.ts

@@ -7,6 +7,7 @@ import lucide from 'virtual:lucide-subset'
 import App from './App.vue'
 import router from './router'
 
+import '@/assets/fonts/fonts.css'
 import '@/assets/main.css'
 
 addCollection(lucide)