update copilot instructions

example/.github/copilot-instructions.md

···
 }
 ```
 
+### 4. Cron tasks
+
+CLI commands can be scheduled to run at specific intervals using cron syntax. To enable it, create a `smallweb.json` file in the root of your app directory with the following structure:
+
+```json
+{
+  "crons": [{
+    // The schedule in cron syntax
+    "schedule": "*/5 * * * *",
+    // args to pass to the run function
+    "args": []
+  }]
+}
+```
+
 ## Common Tasks
 
 Smallweb apps only have write access to the `data/` directory. You can use this directory to store state.
···
 }
 
 db.close();
+```
+
+## Private Apps
+
+Apps can be protected behind authentication. To do this, you'll first need to make sure than an oidc provider is configured in the `.smallweb/config.json[c]` file.
+
+```json
+{
+    "oidc": {
+        // use lastlogin.net as the oidc provider if none is specified
+        "issuer": "https://lastlogin.net"
+    },
+    "authorizedEmails": [
+        "[e-mail]"
+    ]
+}
+```
+
+Then, you can set the `private` property in the `smallweb.json` file to `true`:
+
+```json
+{
+    "private": true
+}
+```
+
+Or protect only specific routes:
+
+```json
+{
+    "privateRoutes": [
+        "/admin/*"
+    ]
+}
+```
+
+The user email can then be retrieved using the `Remote-Email` header:
+
+```ts
+export default {
+  fetch(req: Request) {
+    const email = req.headers.get("Remote-Email");
+    if (!email) {
+      return new Response("Unauthorized", { status: 401 });
+    }
+
+    return new Response(`Hello ${email}`);
+  },
+}
 ```
 
 ## Dependencies