(fix): update dependency and repository security

[kyeunga25]

Summary

• update the transitive Nano ID safety override to the patched 3.3.18 release
• pin GitHub Actions to reviewed full commit SHAs
• add bilingual security, copyright, proprietary usage, and project-entry guidance
• record one exact historical synthetic-UUID Gitleaks false positive without weakening future scans

Validation

• pnpm lockfile supply-chain policy check passed
• pnpm audit: 0 known vulnerabilities
• typecheck, lint, 465 unit tests, 136 Worker tests, build, and Worker dry-run passed
• full Git history and staged changes scanned with redacted Gitleaks v8.30.1: 0 unhandled findings

Safety

No deployment, external provider call, migration, secret change, or production audio access is included.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	studymix-ai	6c2072c	Aug 17 2026, 12:52 PM