docs(pages/Server.md): Add security notice

Up-port of #1319

Author: flovogt

internal/documentation/docs/pages/Server.md

@@ -10,6 +10,19 @@ import VPButton from "vitepress/dist/client/theme-default/components/VPButton.vu
   <VPButton class="no-decoration" text="📚 API Reference" href="https://ui5.github.io/cli/v5/api/module-@ui5_server.html"/>
 </div>
 
+::: warning Development Use Only
+The UI5 Server is intended for **local development purposes only**. It must not be exposed to untrusted parties or used as a public-facing web server.
+
+The server does **not** implement safeguards against various network-based attacks — this is by design, as it is not meant to serve production traffic.
+
+Please be aware of the following risks when using the server:
+
+- **Custom middleware** from third parties can execute arbitrary code on your system and may introduce additional security vulnerabilities when the server is exposed to a network.
+- **Proxy middleware** configured with credentials may enable unauthorized access to the target system for other parties on the same network.
+- Using `--accept-remote-connections` makes the server reachable from all hosts on your network, which significantly increases the attack surface.
+
+:::
+
 ## Standard Middleware
 
 All available standard middleware are listed below in the order of their execution.
@@ -88,4 +101,4 @@ If Chrome unintentionally redirects an HTTP-URL to HTTPS, you need to delete the
 .no-decoration {
     text-decoration: inherit;
 }
-</style>
+</style>