- Add order field to ProjectItem type for custom ordering
- Add ZipMerge, Strings, Calendar Backend, and Boxcar projects
- Reorder projects to prioritize polished/published projects
- Sort portfolio display by order field

Implements 9 security headers including HSTS, CSP, and CORS policies to harden site security.

- Add siteUrl and primaryEmail constants to defs.ts
- Generate JSON-LD sameAs array dynamically from links
- Generate h-card social URLs dynamically from links
- Derive fediverse:creator meta from threads link
- Update feed routes to use centralized constants
- Update email component to use emails from defs.ts

- Add webmention.io endpoint for receiving webmentions
- Create /feed.xml Atom feed for slash pages
- Create /press.xml RSS feed for press/appearances
- Add h-feed/h-entry microformats to slashes page

Create support page with Buy Me a Coffee link using internal
/to/ redirect system. Includes friendly note about alternative
ways to show support like GitHub stars. (closes #115)

- Create /hardware page with categorized tech setup listing
- Add HardwareItem type for hardware data structure
- Include computers, mobile devices, wearables, accessories,
smart home, networking, and 3D printing categories
- Add RSS feed link for /feed.xml in HTML head (closes #112)
- Add hardware to pages and slashPages lists (closes #116)

- Add authorization_endpoint link for IndieAuth/RelMeAuth
- Add atproto rel attribute to Bluesky link for ATProto auth
- Add atproto field to RedirectItem type

Inspired by slashpages.net - lists all top-level URL pages on the site
with descriptions for easy discovery.

- Add social, socialNote, username, displayName fields to RedirectItem type
- Merge verify page accounts array into centralized links array
- Update verify page to use filtered links for social accounts display
- Rename redirects to links throughout codebase for clarity
- Add missing platform icons (Mastodon, Last.fm, Figma, Obsidian, Flickr, Raycast)
- Fix account card spacing and overflow issues

- create ExternalLink component that adds UTM params onClick instead of in href
- shows clean URLs on hover while still tracking with UTM params on click
- remove UTM params from /to/ links since redirects handle them server-side
- update all external links across the site to use ExternalLink

- fix /to/coffee -> /to/buy-me-a-coffee in verify page
- use next-view-transitions Link in verify page for smooth transitions
- add prefetch={false} to external Signal link in contact page

- add prefetch={false} to all external links to prevent unnecessary prefetching
- remove unused navSocialLinks export from defs.ts
- fix RoundedImage component: remove broken Head import and redundant aria-label
- replace <a> with Link component in concerts page for consistency

closes #89