Portfolio App Security ControlsOWASP security headers, Content Security Policy, environment variable security, and hardening configuration.