Harden self-service API auth and redemption integrity#22

darthnithin merged 3 commits intomaindarthnithin/slugswap:mainfrom

codex/security-fixesdarthnithin/slugswap:codex/security-fixesCopy head branch name to clipboard