8b800f679b
- Refactored config guard logic to always inject secure defaults for external-controller-cors (allow-origins: ['http://localhost', 'http://127.0.0.1'], allow-private-network: true). - Ensures both new and existing user configs are automatically upgraded for enhanced CORS security. - Improves configuration migration and future maintainability. fix: add http://localhost:3000 to CORS allow-origins for tauri dev server compatibility