Locally synced open issues (discussions stay on GitHub)
Security: template ships Next.js 16.3.0, which has critical unauthenticated RCE advisories (10 vulns on fresh install)