🔒 Security Notes

• BMW CarData is a private API — use responsibly.
• Never publish or share your id_token / refresh_token.
• Tokens expire automatically; the bridge refreshes them securely.
• Keep your Mosquitto broker private or protected by authentication.