Hardening a Next.js app: security headers, CSP, and dependency hygiene | TechTrio Blog