Block a user
HIGH #280: rate limiter bypassable via X-Forwarded-For
MEDIUM: jump-to-top/bottom nav hidden on mobile until a resize event
Fix #282: jumpnav visible on mobile initial load
#281: /raw/{id} returns empty body for non-image attachment pastes (Fix attempt 1)
Release v0.5.0: README refresh
HIGH: rate limiter bypassable via X-Forwarded-For
Fix #280: rate limiter keys buckets on peer address, not client-controlled X-Forwarded-For
Sync main into dev before v0.5.0 release
#281: /raw/{id} returns empty body for non-image attachment pastes (Fix attempt 1)