The first tagged release

Added

• A 4-player UNO-style game runs on a pluggable rule engine: draw-stacking, jump-in, 7/0, and no-bluffing.
• Opt-in bots with random names fill empty seats, and lobbies support create, join, browse, host settings, kick, promote, and reconnection.
• Accounts use JWT login with avatars, alongside a stats screen and saveable, resumable matches.
• A C++ uWebSockets backend and Svelte frontend share an AsyncAPI-driven contract, with SQLite persistence, a pixel-art interface, SEO metadata, and a multi-stage Docker image on GHCR.

Security

• Token-bucket rate limiting, login throttling with lockout, and per-IP connection caps protect the service.
• WebSocket payload, idle, and backpressure bounds guard against malformed frames, and static serving blocks path traversal.