M0 Security Hardening - Partially Complete

Successfully fixed common/src/config.rs:
- JWT_SECRET required with 32-char min
- Serialize derive removed
- Compiles successfully