Security update

• Add security notes to readme (cb22ae78)
• Add config local_auth for api module (44d59b16)
• Add config for the list of modules to init (15ec995e)
• Add config allow_paths for api module (231cab36)
• Add config allow_paths for exec module (640db302)
• Add config allow_paths for echo module (2836fdae)
• Add insecure sources logic (2133f532)
• Add check for insecure uri from onvif source (e2c7d067)
• Add errors output to streams API (ac80f147)
• Add trace log for ignored api paths (2ce38b44)

HomeKit server update

• Add support maxwidth/maxheight settings for homekit source (d053d88c)
• Add support custom params for hass source (964bb225)
• Add support uint64 to tlv8 (96919bf9)
• Code refactoring for HomeKit server (158f9d3a)
• Improve homekit secure conn buffers (ff18283d)
• Improve homekit tlv8 parsing (994e0dc5)
• Rename HomeKit structures according to specs (e4359ac2)
• Fix HomeKit proxy EVENTs #684 #1923 (81cfcf87)
• Fix HomeKit proxy for hass source #1353 (5cc32197)
• Fix API /api/homekit/accessories (bc1a4ac8)

WebUI update

• Update WebUI design (1fe60267)

Other

• Add api endpoint to return supported schemas #1939 by @edenhaus (c98b0a83)
• Code refactoring for tapo source (7254bd4f)
• Restore simple onvif client logic (cc97bc33)
• Fix onvif client for some cameras (6db4dda5)
• Fix tapo source for some cameras #1918 (9f407a75)
• Fix wrong log message for streams module (c10a06d1)