pub async fn security_headers(request: Request, next: Next) -> Response
Axum middleware that sets security-hardening response headers on every response.