Application security covering input validation, auth, headers, secrets management, and dependency auditing