chore: sync repository to current working state

Brings azcomputerguru/guru-connect up to the authoritative working copy that
had been maintained in the claudetools monorepo: Phase 1 security and
infrastructure (middleware, metrics, utils, token blacklist, deployment
scripts, security audits) plus the native-remote-control integration spec.
Preserves the repo .gitignore, .cargo, and server/static/downloads.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

PROJECT_OVERVIEW.md

@@ -0,0 +1,147 @@
+# GuruConnect - Project Overview
+**Status:** Phase 1 Starting
+**Last Updated:** 2026-01-17
+
+---
+
+## Quick Reference
+
+**Current Phase:** Phase 1 - Security & Infrastructure (Week 1 of 4)
+**Team:** Backend Developer + DevOps Engineer
+**Next Milestone:** All critical security vulnerabilities fixed (Week 2)
+
+---
+
+## Project Structure
+
+```
+guru-connect/
+├── PROJECT_OVERVIEW.md              ← YOU ARE HERE (quick reference)
+├── MASTER_ACTION_PLAN.md            ← Full roadmap (all 4 phases)
+├── GAP_ANALYSIS.md                  ← Feature implementation matrix
+├── PHASE1_SECURITY_INFRASTRUCTURE.md ← Current phase details
+├── PHASE2_CORE_FEATURES.md          ← Next phase details
+├── CHECKLIST_STATE.json             ← Current progress tracking
+└── [Review archives]
+    ├── Security review (conversation archive)
+    ├── Architecture review (conversation archive)
+    ├── Code quality review (conversation archive)
+    ├── Infrastructure review (conversation archive)
+    └── Frontend/UI review (conversation archive)
+```
+
+---
+
+## Phase Summary
+
+| Phase | Name | Duration | Status | Start Date | Completion |
+|-------|------|----------|--------|------------|------------|
+| **1** | **Security & Infrastructure** | 4 weeks | **STARTING** | 2026-01-17 | TBD |
+| 2 | Core Features | 8 weeks | Not Started | TBD | TBD |
+| 3 | Competitive Features | 8 weeks | Not Started | TBD | TBD |
+| 4 | Production Readiness | 6 weeks | Not Started | TBD | TBD |
+
+**Total Timeline:** 26 weeks (conservative) / 20 weeks (recommended) / 16 weeks (aggressive)
+
+---
+
+## Phase 1: This Week's Focus
+
+### Week 1 Goals
+- Fix JWT secret hardcoded (SEC-1) - **CRITICAL**
+- Implement rate limiting (SEC-2) - **CRITICAL**
+- Fix SQL injection (SEC-3) - **CRITICAL**
+- Fix agent validation (SEC-4) - **CRITICAL**
+- Fix session takeover (SEC-5) - **CRITICAL**
+
+### Active Tasks (see TodoWrite in session)
+Check current session todos for real-time progress.
+
+### Checklist Progress
+- Total Phase 1 items: 147
+- Completed: 0
+- In Progress: (see session todos)
+
+---
+
+## Critical Path
+
+**Current Blocker:** None (starting fresh)
+**Next Blocker Risk:** JWT secret fix may require database migration
+**Mitigation:** Test on staging first, prepare rollback procedure
+
+---
+
+## Team Assignments
+
+**Backend Developer:**
+- Security fixes (SEC-1 through SEC-13)
+- API enhancements
+- Database migrations
+
+**DevOps Engineer:**
+- Systemd service setup
+- Prometheus monitoring
+- Automated backups
+- CI/CD pipeline
+
+---
+
+## Key Decisions Made
+
+1. **Timeline:** 20-week recommended path (balanced risk)
+2. **Team Size:** 4-5 developers (optimal)
+3. **Scope:** Tier 0 + Tier 1 features (competitive MVP)
+4. **Architecture:** Keep current Rust + Axum + PostgreSQL stack
+5. **Deployment:** Systemd service (not Docker for Phase 1)
+
+---
+
+## Success Metrics
+
+**Phase 1 Exit Criteria:**
+- [ ] All 5 critical security issues fixed
+- [ ] All 8 high-priority security issues fixed
+- [ ] OWASP ZAP scan clean (no critical/high)
+- [ ] Systemd service operational
+- [ ] Prometheus + Grafana configured
+- [ ] Automated backups running
+- [ ] CI/CD pipeline functional
+
+---
+
+## Quick Commands
+
+**View detailed phase plan:**
+```bash
+cat PHASE1_SECURITY_INFRASTRUCTURE.md
+```
+
+**Check current progress:**
+```bash
+cat CHECKLIST_STATE.json
+```
+
+**View full roadmap:**
+```bash
+cat MASTER_ACTION_PLAN.md
+```
+
+**View feature gaps:**
+```bash
+cat GAP_ANALYSIS.md
+```
+
+---
+
+## Communication
+
+**Status Updates:** Weekly (every Monday)
+**Blocker Escalation:** Immediate (notify project owner)
+**Phase Review:** End of each phase (4-week intervals)
+
+---
+
+**Project Owner:** Howard
+**Technical Lead:** TBD
+**Phase 1 Lead:** Backend Developer + DevOps Engineer