pub async fn security_headers( request: Request<Body>, next: Next, ) -> Response<Body>
Axum middleware that sets security-hardening response headers on every response.