subdomain Enumaration via side channel alerting security bug which is critical

[nguyenblacks]

the AlgoraWeb.Endpoint contains a logic flaw in the canonical_host/2 function its pefroms a database lookup Algora.Accounts.get_user_by_handle/1 and triggers a cricitical security alert Algora.Activities.alert/2 based on weather ,e a subdomain matches a valid user handle

[shengtenghou4-star]

D:/Git/claim

[ElizaBackrooms]

Opened PR #299 — removes the critical alert on valid {handle}.algora.io visits that enabled handle enumeration via Discord/email side channel. Redirect behavior is unchanged.