Baseline hardening templates for modern web apps: headers, CSP starter sets, and security review checklists.
