Add SecurityConfig to permit daemon trigger and actuator endpoints

Spring Security defaults blocked all endpoints with 401. Added explicit config to permit /api/daemon/** and /actuator/** without authentication.

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.