New Features

• Added time-limited, signed schedule share links with a server-issued share-token flow and configurable public CORS origins.
• Added app-level toasts and improved dialog primitives.
• Added richer loading skeletons across the dashboard and pages.

Bug Fixes

• Enforced JWT authentication for protected profile and image operations, and tightened public schedule CORS and error handling.
• Improved image fallbacks and accessibility and focus behavior in several UI dialogs.

Refactor

• Moved the global theme to CSS-variable tokens and modernized UI primitives and component organization.

Testing & CI

• Added a new CI quality workflow, coverage thresholds, and additional unit tests for notifications and sharing.