GT AI OS Community Edition v2.0.33

Security hardening release addressing CodeQL and Dependabot alerts:

- Fix stack trace exposure in error responses
- Add SSRF protection with DNS resolution checking
- Implement proper URL hostname validation (replaces substring matching)
- Add centralized path sanitization to prevent path traversal
- Fix ReDoS vulnerability in email validation regex
- Improve HTML sanitization in validation utilities
- Fix capability wildcard matching in auth utilities
- Update glob dependency to address CVE
- Add CodeQL suppression comments for verified false positives

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/tenant-app/package-playwright.json

@@ -0,0 +1,31 @@
+{
+  "name": "@gt2/tenant-app-e2e",
+  "version": "1.0.0",
+  "private": true,
+  "description": "GT 2.0 Tenant App End-to-End Testing with Playwright",
+  "scripts": {
+    "test": "playwright test",
+    "test:ui": "playwright test --ui",
+    "test:headed": "playwright test --headed",
+    "test:debug": "playwright test --debug",
+    "test:report": "playwright show-report",
+    "test:install": "playwright install",
+    "test:install-deps": "playwright install-deps",
+    "test:codegen": "playwright codegen http://localhost:3002",
+    "test:guardian": "playwright test --grep '@guardian'",
+    "test:auth": "playwright test --grep '@auth'",
+    "test:documents": "playwright test --grep '@documents'",
+    "test:chat": "playwright test --grep '@chat'",
+    "test:smoke": "playwright test --grep '@smoke'",
+    "test:ci": "playwright test --reporter=html,junit",
+    "test:visual": "playwright test --grep '@visual'"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.40.0",
+    "@types/node": "^20.9.0",
+    "typescript": "^5.3.0"
+  },
+  "dependencies": {
+    "dotenv": "^16.3.1"
+  }
+}