Bi-Dash security reporting

Report issues in this fork to its maintainer through the Bi-Dash repository. If private vulnerability reporting is enabled, use the repository’s Security tab. Do not post credentials, connection strings or exploit details in a public issue. A public issue may request a private contact without disclosing sensitive details. No response-time commitment is implied.

This distribution inherits upstream components and third-party query runners. Python query-runner access executes code in the worker environment and must be restricted to trusted users. Administrative data-source access can reach internal networks; configure access accordingly. The new role and query limits are documented in ACCESS_CONTROL.md.

Upstream security contacts are for the upstream Redash project, not a support channel operated by Bi-Dash. Preserve upstream security and license attribution when forwarding a component-specific report.