Bump version to v0.1.14 and add release notes

Author: joonsoome

README.md

@@ -2,7 +2,7 @@
 
 > Unofficial, self‑hosted web UI for reading PDFs from a Zotero library that syncs attachments via WebDAV.
 
-**Status:** PoC / early preview (v0.1.13). Things may break; please treat this as an experiment, not production‑ready software.
+**Status:** PoC / early preview (v0.1.14). Things may break; please treat this as an experiment, not production‑ready software.
 
 Screenshot:
 ![WebUI](./docs/assets/screenshot.png)

docs/releases/v0.1.14.md

@@ -0,0 +1,13 @@
+# v0.1.14
+
+## Summary
+- Optional HTTP Basic Auth for PDF Proxy and Web Library (env-driven) to prevent reverse-proxy bypass from exposing the UI.
+- Added `scripts/npm-basic-auth-fix.sh` to verify 401/2xx behavior when using Cloudflare/NPM tunnels.
+- Fixed Web Library build by ensuring the `data/` directory exists so `item-types-with-icons.json` is generated.
+
+## Deployment notes
+- Tag: `v0.1.14`
+- Images (expected from GH Actions):  
+  - `ghcr.io/joonsoome/on-prem-zotero-webui/web-library:v0.1.14`  
+  - `ghcr.io/joonsoome/on-prem-zotero-webui/pdf-proxy:v0.1.14`
+- Env: set `PDF_PROXY_BASIC_AUTH_*` and `WEB_LIBRARY_BASIC_AUTH_*` to enforce in-container Basic Auth if your tunnel bypasses NPM.