Package Kaneo 2.9.9 and latest with a private PostgreSQL service, generated persistent credentials, hardened non-root runtimes, and first-admin deployment guidance.