Add Endpoints and MiddlewareChain iterators on API server, bridge
ResponseFieldsSeq/HeadersSeq. Use strings.SplitSeq in SDK codegen,
slices.SortFunc in OpenAPI spec generation.
Co-Authored-By: Gemini <noreply@google.com>
Co-Authored-By: Virgil <virgil@lethean.io>
Wraps gin-contrib/secure to set HSTS (1 year, includeSubdomains),
X-Frame-Options DENY, X-Content-Type-Options nosniff, and
Referrer-Policy strict-origin-when-cross-origin on all responses.
Co-Authored-By: Virgil <virgil@lethean.io>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>