Hardens auth with PBKDF2, lockouts, local QR setup, and safer embeds while moving account security under the username menu.
Co-authored-by: Cursor <cursoragent@cursor.com>