Address code review findings:
- Validate USB paths (restrict to /mnt/usbN/, block .., require .elf/.bin)
- Sanitize /loadpayload route (resolve via known scan dirs only)
- Add filename validation to /manage:check endpoint
- Fix autoload config OOB write (swap fgets/line_count check order)
- Escape JSON strings in /log and /get_config responses
- Move json_escape to utils.c as nm_json_escape for reuse
- Replace global response_buffer with per-request malloc + MUST_FREE
- Add alloc_response_buffer helper to deduplicate OOM handling
- Fix overwrite flag being ignored in USB move
- Handle truncated repository JSON with proper error status
- Centralize CORS headers via add_cors_headers helper
- Fix dangling pointer in loadpayload resolved_path scope
- Implemented folder-based storage (/payloads/<clean_name>/) for all methods
- Added install_source and install_source_detail metadata to tracking JSON
- Synchronized naming logic between frontend and backend to handle platform suffixes (-ps5/-ps4)
- Added overwrite confirmation prompts for web uploads, USB moves, and repository updates
- Updated repository installer to track source URLs dynamically
- Implemented native PS5 on-screen debug notifications via sceKernelSendNotificationRequest.
- Added robust local IP resolution using getifaddrs to replace placeholder IP.
- Migrated server port from 50005 to 8084 across the entire stack.
- Added a startup notification on the PS5 screen displaying version, IP, and port.
- Created deploy.sh script for fully automated build and deployment:
- Automatically requests shutdown of previous instance.
- Rebuilds both React frontend and native ELF.
- Performs unidirectional ELF transfer via socat and exits immediately.
- Updated Makefile and README with new deployment workflow.
najdek