Deployment boundary

The current POST /api/v1/grade endpoint is unauthenticated and accepts uploaded files. It is suitable only for a trusted deployment until the application adds:

• Authentication and authorization.
• Upload validation, file-type checks, and request-size limits.
• Request rate and resource limits.
• Deliberate error handling with structured client responses.
• Controlled debug-image storage, access, and retention.

Do not deploy the current implementation as a public grading API or expose it directly to untrusted clients. This project does not document a public-production deployment recipe because doing so would misrepresent the implemented security and operational controls.

The repository's documentation CI can publish the static website to the sunbeam-docs Pages project after a main branch build. That static-site publication is separate from deploying or validating the Spring service.