security: fix SSE CORS wildcard and add token authentication (#48)

* Initial plan

* fix: remove CORS wildcard and add token auth for SSE mode

* fix: resolve merge conflicts with master and address review feedback

* fix: remove extra blank line in server_test.go to satisfy gofmt

Co-authored-by: cfc4n <709947+cfc4n@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: cfc4n <709947+cfc4n@users.noreply.github.com>
Co-authored-by: CFC4N <cfc4n.cs@gmail.com>

release v0.4.0

Signed-off-by: CFC4N <cfc4n.cs@gmail.com>

release v0.3.2

Signed-off-by: CFC4N <cfc4n.cs@gmail.com>

release v0.3.1

Signed-off-by: CFC4N <cfc4n.cs@gmail.com>

release v0.3.0

Signed-off-by: CFC4N <cfc4n.cs@gmail.com>

release v0.2.0

Signed-off-by: CFC4N <cfc4n.cs@gmail.com>

release v0.1.1

Signed-off-by: CFC4N <cfc4n.cs@gmail.com>

chore: remove redundant upload-release-assets step from release workflow

Signed-off-by: cfc4n <cfc4n.cs@gmail.com>

chore: update CHANGELOG for v0.0.8 release with new features and enha…

…ncements

Signed-off-by: cfc4n <cfc4n.cs@gmail.com>

release v0.0.7

Signed-off-by: cfc4n <cfc4n.cs@gmail.com>