feat: enhance OAuth flow validation and improve security checks; add credential read blocking and git operation safeguards

src/model/msglog/mod.rs

@@ -22,6 +22,8 @@ pub fn open_or_create(session_dir: &std::path::Path) -> anyhow::Result<rusqlite:
         std::fs::create_dir_all(parent)?;
     }
     let conn = rusqlite::Connection::open(&path)?;
+    conn.execute_batch("PRAGMA journal_mode = WAL;")?;
+    conn.execute_batch("PRAGMA busy_timeout = 5000;")?;
     schema::init_schema(&conn)?;
     Ok(conn)
 }