fix: cover api edge cases

.github/workflows/docker.yml

@@ -25,6 +25,8 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
 
+      # Production hardening: add dependency and image scanning before publishing,
+      # for example cargo-audit plus a container scanner such as Sysdig or Trivy.
       - name: Build multi-arch image
         uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7
         with: