Based on the git diff provided, here's a concise and descriptive commit message:

feat: add security event taxonomy and optimize park queryset

- Add comprehensive security_event_types ChoiceGroup with categories for authentication, MFA, password, account, session, and API key events
- Include severity levels, icons, and CSS classes for each event type
- Fix park queryset optimization by using select_related for OneToOne location relationship
- Remove location property fields (latitude/longitude) from values() call as they are not actual DB columns
- Add proper location fields (city, state, country) to values() for map display

This change enhances security event tracking capabilities and resolves a queryset optimization issue where property decorators were incorrectly used in values() queries.

backend/thrillwiki/urls.py

@@ -78,6 +78,8 @@ urlpatterns = [
     path("accounts/", include("apps.accounts.urls")),
     # Default allauth URLs (for social auth and other features)
     path("accounts/", include("allauth.urls")),
+    # Allauth headless API (for SPA passkey login, WebAuthn, etc.)
+    path("_allauth/", include("allauth.headless.urls")),
     path(
         "accounts/email-required/",
         accounts_views.email_required,