Windows installer: payload hash-locking, SBOM, client-IP handling, operator docs

requirements-dev.in

@@ -0,0 +1,12 @@
+# Development and CI dependencies.
+# Production installs use requirements.txt only; these never ship to a site.
+#
+# Compile with:
+#   uv pip compile requirements-dev.in -o requirements-dev.txt
+
+-r requirements.in
+
+# Testing
+pytest>=7.0
+pytest-flask>=1.2
+pytest-cov>=4.0