TIL: Aug 4

TIL: Hardening CI/CD security requires explicitly disabling persist-credentials in checkout steps and applying strict permission scopes to Gitleaks jobs, while performance overhead can be significantly reduced by implementing aggressive asset compression for static icons and enforcing strict CSP headers in next.config.ts.