/// Middleware that rejects browser-borne cross-origin requests (DNS rebinding, CSRF-style abuse).
/// Middleware that logs request method, path, status, and latency.
/// Middleware that adds defense-in-depth security response headers.
/// Middleware that bounds REST API handler time with a per-request deadline.