feat(v3.5.0): per-server security modes — readonly / restricted + audit log (#36)