chore: perform security audit (#252)

- Scanned for SQL injection, hardcoded secrets, command injection, path traversal, and insecure deserialization
- No critical or high severity vulnerabilities were found
- Confirmed path validation in `security_utils.py` and `main.py` is secure against LFI and traversal attacks

Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
Co-authored-by: thebearwithabite <216692431+thebearwithabite@users.noreply.github.com>

Author: thebearwithabite