What's new

TLS + hygiene checks, copy-paste fixes, mobile dashboard, signed binaries

• TLS expiry monitoring — cert expired, <30d, <90d, plus hostname-mismatch detection (5 new check IDs).
• Robots/sitemap hygiene — flags missing /robots.txt, accidental "Disallow: /" on production, missing sitemap.xml.
• Copy-paste fix snippets — every SEO/OG/Hygiene/TLS finding now ships with a drop-in HTML or config block you can paste straight into your codebase.
• Mobile dashboard — hamburger nav, sticky desktop sidebar, responsive padding, tables that scroll on phones instead of breaking.
• Magic-code on duplicate signup — typing an existing email at /signup now auto-sends a sign-in code instead of bouncing you to a generic error.
• Sigstore-signed CLI binaries — every release is now attested via GitHub OIDC + sigstore. Verify with DRDEPLOY_VERIFY_ATTESTATION=1.

Public scan reports + CLI

Public, signed scan-report URLs with 30-day expiry; share with collaborators or auditors without giving them a login. CLI in beta with login / init / status / scan via OAuth device flow.