Require stricter client/server TLS options, centralize device auth on agent APIs, constrain Linux privileged update helpers, and harden filebrowser path checks with supporting audit notes. Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
Replace invalid prototype getter syntax in local-files.js and mesh-files.js so the file transfer modal loads in browsers. Panel updates patch betterdesk-server.service via a passwordless-sudo helper instead of interactive sudo tee. Refs #217