GT AI OS Community Edition v2.0.33

Security hardening release addressing CodeQL and Dependabot alerts:

- Fix stack trace exposure in error responses
- Add SSRF protection with DNS resolution checking
- Implement proper URL hostname validation (replaces substring matching)
- Add centralized path sanitization to prevent path traversal
- Fix ReDoS vulnerability in email validation regex
- Improve HTML sanitization in validation utilities
- Fix capability wildcard matching in auth utilities
- Update glob dependency to address CVE
- Add CodeQL suppression comments for verified false positives

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

scripts/postgresql/unified/00-create-databases.sql

@@ -0,0 +1,26 @@
+-- GT 2.0 Admin Database Creation Script
+-- Creates databases for admin/control panel cluster only
+-- This MUST run first (00-prefix ensures execution order)
+
+-- Enable logging
+\set ON_ERROR_STOP on
+\set ECHO all
+
+-- Create gt2_admin database for control panel
+SELECT 'CREATE DATABASE gt2_admin'
+WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'gt2_admin')\gexec
+
+-- Create gt2_control_panel database for control panel backend
+SELECT 'CREATE DATABASE gt2_control_panel'
+WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'gt2_control_panel')\gexec
+
+-- Log database creation completion
+DO $$
+BEGIN
+    RAISE NOTICE '=== GT 2.0 ADMIN DATABASE CREATION ===';
+    RAISE NOTICE 'Databases created successfully:';
+    RAISE NOTICE '- gt2_admin (control panel metadata)';
+    RAISE NOTICE '- gt2_control_panel (control panel backend)';
+    RAISE NOTICE 'Note: gt2_tenants created in tenant cluster separately';
+    RAISE NOTICE '======================================';
+END $$;