harden: fail-closed API auth, narrow container exposure, patch deps#1

mattmacrocket merged 2 commits into

mainrocketweb/squirrelops:mainfrom

harden/controlplane-authrocketweb/squirrelops:harden/controlplane-authCopy head branch name to clipboard