Add SecurityConfig to permit daemon trigger and actuator endpoints

Spring Security defaults blocked all endpoints with 401. Added explicit config to permit /api/daemon/** and /actuator/** without authentication.

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.