Add security hardening for shared hosting environments

Improve session cookie security with HttpOnly and SameSite attributes
Add security headers via .htaccess
Block direct access to sensitive files
Restrict allowed HTTP methods
Document cPanel-specific security configuration
Add container hardening for ServerTokens and ServerSignature

apache.conf

@@ -1,5 +1,13 @@
+# Minimize server version disclosure
+ServerTokens Prod
+
+# Disable PHP version header and error display
+php_flag expose_php Off
+php_flag display_errors Off
+php_flag log_errors On
+
 <Directory /var/www/>
-    Options Indexes FollowSymLinks
+    Options FollowSymLinks
     AllowOverride All
     Require all granted
 </Directory>