captain_api.py:
- Generate random JWT_SECRET if not configured (with warning)
- Restrict CORS to specific origins
- Add POST /sessions endpoint to create screen sessions
- Sanitize session names (prevent command injection)
- Validate file paths to upload directory only
- Improve JWT error handling
- Set TERM environment for screen sessions
flow-ui: Add multi-instance support with server validation
mindlink: Add multi-instance support with category filtering
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implementación completa de soporte multi-bucket para tabla ATC:
- Tabla public.bucket_registry (metadata de buckets)
- Tabla public.bucket_access_log (auditoría)
- Campo bucket_mrf en tzzr_core_secretaria.atc
- 2275 archivos migrados a bucket 'deck'
- Documentación completa de sesión
Cambios menores:
- deck-v4.6.html actualizado
- Caddyfile para captain-mobile
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>