- Removed 'Georgia' from --font-serif stack, replaced with ui-serif - Added 'GeorgiaDigits' to --font-mono for snowball extra payment input - Georgia now only enters via GeorgiaDigits @font-face with unicode-range - Bump v0.33.8.1 -> v0.33.8.2
- RoadmapPage: kanban-style priority lanes, shadcn Collapsible/Tabs, lazy-loaded activity log, admin-only /api/about/roadmap + /dev-log endpoints - Import CSRF fix: added x-csrf-token header to importAdminBackup, previewSpreadsheetImport, previewUserDbImport raw fetch() calls - Removed AdminDashboard.jsx, replaced by RoadmapPage - Added @radix-ui/react-collapsible + collapsible shadcn component - Security audit by Private_Hudson: PASS (CSRF fix verified, admin endpoints gated, path traversal mitigated, XSS safe)
null