Improvements
- Permission provisioning now respects an extra per-channel buffer so the auto-provision flow avoids hammering the same channel in quick succession.
- Security hardening update: protections against replayed webhook events, burst limits for external services, and stricter public sharing link generation with dedicated secrets.