MutualAidNYC

Refactored the service_at_locations feature into a Model-View-Controller architecture and added corresponding tests. Additionally, downgraded PEP 695 generics to ensure compatibility with Python 3.10.

Resolved Bandit security findings regarding SQL injection and host binding. Updated dependencies to patch high-severity vulnerabilities in flatted, minimatch, picomatch, and next.

Updated the map to correctly extract coordinates from temporary lookup fields and added geocoder setup documentation. Redacted sensitive server details from CLAUDE.md for security, and refactored code to share a haversine helper and update configuration examples.

Updated the organization page map to display group locations when service-level pins are missing or derived from the organization's address. Resolved missing map locations by fixing service-at-location lookups and geocoder normalization, and split server/client API URLs to prevent SSR loopback timeouts.

Updated map popup tag links to use native category and community URL parameters instead of search queries.