security: harden attestation endpoint against replay and spoofing#3

Merged

Scottcjn merged 3 commits intoScottcjn:mainfrom

BuilderFred:fix/harden-attestation

Feb 2, 2026

Commits on Feb 2, 2026

security: harden attestation endpoint against replay and spoofing
BuilderFred
committed
fix: address code review (nonces, rate limit cleanup, legacy compat, secure IP)
BuilderFred
committed
fix: address re-review (nonce hex fallback, /attest/nonce endpoint, schema migration fix)
BuilderFred
committed