fix: FAQ accordion double-toggle bug, de-emphasize rate limiting

- FAQ had both inline onclick AND addEventListener, causing double-toggle (no visible change)
- Removed duplicate JS listener, keeping inline onclick
- Replaced 'Rate limiting' mention in features with 'Secure defaults'

public/index.html

@@ -330,7 +330,7 @@ footer{border-top:1px solid var(--border);padding:48px 24px 32px;background:var(
       <div class="feature-card">
         <div class="feature-icon purple">🔒</div>
         <h3>Secure by Default</h3>
-        <p>SSRF protection blocks internal IPs and metadata endpoints. Rate limiting and strict input validation built in.</p>
+        <p>SSRF protection blocks internal IPs and metadata endpoints. Strict input validation and secure defaults built in.</p>
       </div>
       <div class="feature-card">
         <div class="feature-icon orange">📐</div>
@@ -633,10 +633,7 @@ async function runPlayground(){
   }
 }
 
-// FAQ toggles
-document.querySelectorAll('.faq-q').forEach(function(q){
-  q.addEventListener('click',function(){this.parentElement.classList.toggle('open')});
-});
+// FAQ toggles — handled by inline onclick, no duplicate listeners needed
 
 // Smooth scroll
 document.querySelectorAll('a[href^="#"]').forEach(function(a){