v2.1.0-alpha.594

Changes

• note x-ingress-path trust requirement in reverse proxy guide (f18fa3a)
• type lock credentials api response as sanitized shape (37ad227)
• use timingSafeEqual when verifying lock pin (8ac14b2)
• bump multer, lodash, path-to-regexp, minimatch to patched versions (8735c99)

⚠️ This is an alpha release - use at your own risk!