GT AI OS Community Edition v2.0.33

Security hardening release addressing CodeQL and Dependabot alerts:

- Fix stack trace exposure in error responses
- Add SSRF protection with DNS resolution checking
- Implement proper URL hostname validation (replaces substring matching)
- Add centralized path sanitization to prevent path traversal
- Fix ReDoS vulnerability in email validation regex
- Improve HTML sanitization in validation utilities
- Fix capability wildcard matching in auth utilities
- Update glob dependency to address CVE
- Add CodeQL suppression comments for verified false positives

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/tenant-backend/app/websocket/__init__.py

@@ -0,0 +1,27 @@
+"""
+WebSocket module for GT 2.0 real-time chat functionality.
+
+Provides secure, tenant-isolated WebSocket connections for:
+- Real-time chat messaging
+- Typing indicators
+- Connection management
+- Event broadcasting
+"""
+
+from .manager import (
+    WebSocketManager,
+    WebSocketConnection,
+    ChatMessage,
+    websocket_manager,
+    get_websocket_manager,
+    authenticate_websocket_connection
+)
+
+__all__ = [
+    "WebSocketManager",
+    "WebSocketConnection", 
+    "ChatMessage",
+    "websocket_manager",
+    "get_websocket_manager",
+    "authenticate_websocket_connection"
+]