Fix CSRF, SyncKit rate limiter, CI pipeline; bump to v0.4.10
Server hardening, docs updates, new migrations, SyncKit improvements
Split helpers.rs into formatting, crypto, rate_limit modules