runlight 0.1.3

Security
- A mail service, mail webhook, or AI assistant that redirects to another address is refused before anything is sent there, so its key and the message never leave for a server you didn't choose.
- Those requests connect to the address Runlight checked, so a name that changes between the check and the connection can't lead them to a cloud metadata address.
- The AI assistant's limits hold when questions are sent all at once, so a viewer can't go past the daily limit.
- A host's location headers, such as Cloudflare's country, count only for a request that came through Cloudflare's own addresses or a reverse proxy your Drupal settings trust, so a visitor can't write their own.

Fixed
- Changing a site in Runlight's dashboard checks every field before it changes anything, so a change refused for a bad or taken domain no longer shortens how long visits are kept or deletes older ones.
- Answers from AI models, mail services, and link domains are read only up to a sensible size.
- A chart over a long range with an interval too fine for it moves up to the next interval that fits, instead of lumping the rest of the range into its last point.

Full changelog: https://github.com/runlightsh/runlight/blob/main/CHANGELOG.md