security: add Bearer token auth to x-vibepoastry, restrict CORS

Remove server-side stress test validator

Add stress test validator — cringe/tone gate before posting

Add tweet deletion endpoint (DELETE /tweet/:id)

Add duplicate post protection at both server and VPS layers

Fix systemd service to use venv python path

Rewrite UI — sidebar tabs: Compose, Feed, Schedule, Assets

Rewrite server.js — SQLite drafts, VPS proxy, asset/media CRUD

Add VPS FastAPI service for x-vibepoastry

Add screenshot to README

Initial release — local X composer with threads, images, onboarding