Plug & play security for FastAPI — CORS (glob), CSRF, IP blocking (trusted proxies), rate limiting (fixed+sliding), honeypots (URL+passive), JWT (RS256/ES256, token binding, leeway), API keys (sk_/pk_), MFA (TOTP), OAuth2/OIDC (PKCE), RBAC (resource:action), …