Security hardening release ✨
- Rate limiting on API endpoints (express-rate-limit)
- SSRF guards on URL fetch endpoints
- Non-root container (added non-root user, removed setuid bit)
- Health endpoint + graceful shutdown
- Dependency bumps (backend & frontend)