mt: close the SSRF integer-IP bypass in link preview
Remediate audit findings: SSRF userinfo bypass, guest role, C1 scope gaps