Security hardening + new tools deployment

- Hide Apache version (ServerTokens Prod)
- Add Permissions-Policy header
- Remove deprecated X-XSS-Protection
- Consolidate security headers to .htaccess only (remove duplicates from PHP)
- Deploy free tools: robots-analyzer, data-converter
- Deploy tools announcement blog post
- Update sitemap with new tools and blog post

includes/footer.php

@@ -33,6 +33,7 @@
             <div class="footer-section">
                 <h3>Resources & Insights</h3>
                 <ul>
+                    <li><a href="/tools/">Free Tools</a></li>
                     <li><a href="/blog/">Data Intelligence Blog</a></li>
                     <li><a href="/case-studies/">Case Studies</a></li>
                     <li><a href="/about">About UK Data Services</a></li>

includes/header.php

@@ -14,6 +14,7 @@
             <a href="/#services" class="nav-link">Services</a>
             <a href="/project-types" class="nav-link">Project Types</a>
             <a href="/about" class="nav-link">About</a>
+            <a href="/tools/" class="nav-link">Free Tools</a>
             <a href="/blog/" class="nav-link">Blog</a>
             <a href="/#contact" class="nav-link">Contact</a>
             <a href="/quote" class="nav-link cta-button">Request Consultation</a>