Kestra v1.3.29 exposes unauthenticated management endpoints on port 8081

According to the GitHub Security Advisory database, Kestra v1.3.29 has a security issue where management and actuator endpoints served on port 8081 are accessible without authentication. This occurs even when basic authentication is enabled for the main API on port 8080. The exposed endpoints include `/env`, which reveals the full resolved environment and configuration, and `/loggers/{name}`, which allows runtime log level changes. Other management endpoints on port 8081 are similarly unauthenticated. The default configuration in the shipped repository and reference `docker-compose.yml` does not warn that port 8081 must be kept internal, and the reference compose file publishes it without restrictions.

Operators should carefully review their deployment configurations to ensure port 8081 is not exposed to external networks. If the port is accessible, sensitive configuration data and runtime state could be manipulated by unauthenticated clients. Until a fix is provided, network-level restrictions or firewall rules should be applied to limit access to port 8081. This issue highlights the importance of validating the security posture of default configurations, especially for management endpoints, which are often overlooked during deployment.