[BaaRai]

Release v0.5.1.

• Login rate limit per client IP, with ARTEX_TRUSTED_PROXIES and X-Forwarded-For support (fix(auth): rate-limit login per IP, trusted proxies, 12-character passwords #150).
• New passwords need at least 12 characters; passwords set under the old 8-character minimum still log in.
• The binary listens on 127.0.0.1:8787 by default; pass -addr :8787 for remote bare-metal access.
• /api/health hides the service name and version from anonymous callers.
• The JWT signing key lives in its own Docker volume (fix(auth): keep the JWT signing key in a dedicated volume #149).

Upgrade notes: Docker users can copy the old key before recreating the container (see CHANGELOG); bare-metal users who access the UI remotely must pass -addr :8787; reverse-proxy users must set ARTEX_TRUSTED_PROXIES and send X-Forwarded-For.