- Add MaxBytesReader to limit paste body size (1 MB)
- Buffer template output before writing to prevent partial responses
- Add paste ID collision retry logic
- Update Dockerfile to use modern multi-stage build (remove go.rice)
- Update Makefile to use direct go build commands
- Add test for oversized paste rejection