fix(security): harden sanitize, flatten, redaction, signature validation, CSP, proxies and CI

src/pages/edit-pdf.html

@@ -350,9 +350,14 @@
             <i data-lucide="plus" class="faq-d-icon"></i>
           </summary>
           <p class="faq-d-a">
-            Yes. Applying a redaction removes the content underneath the marked
-            area from the file rather than covering it with a box, so the text
-            can't be recovered by copying or searching. Open the downloaded file
+            Yes, once it's applied. Marking text or an area only flags it.
+            Applying a redaction removes the content underneath the marked area
+            from the file rather than covering it with a box, so the text can't
+            be recovered by copying or searching. If you download with marks
+            that haven't been applied yet, the editor offers to apply them
+            first. When you redact selected text, copies of it in the file's
+            properties, bookmarks, comments, and attachments are removed on
+            download too, unless the file is encrypted. Open the downloaded file
             and check before you share it.
           </p>
         </details>