Security: fix open redirect + timing-safe HMAC verify#2

devin-ai-integration[bot] wants to merge 2 commits into

mainitsablabla/kilo-control:mainfrom

devin/1776568749-security-fixesitsablabla/kilo-control:devin/1776568749-security-fixesCopy head branch name to clipboard