- Use GITHUB_TOKEN env var instead of hardcoded token - Add ownership validation (user_id) for orders (IDOR fix) - Require admin role for /admin/backup endpoint - Improve host validation with regex to prevent command injection