Notes from the build, mostly security and Flutter.

Things I worked out the hard way and wrote down: API security, authentication without a bill, Flutter release notes, HTTP, and the boring discipline that keeps code readable.