fix(P1-security): Rate limiter fails CLOSED for auth/AI endpoints when Redis is down

fix(P1-security): Reduce access token to 15min, add refresh session table, implement token revocation on logout

fix(P0): encryption.py uses settings.ENCRYPTION_KEY from config properly

fix(P0): Remove unused Field import from config, add ENCRYPTION_KEY to settings"

fix: Separate ENCRYPTION_KEY from SECRET_KEY, add key_last4 to avoid decrypt on list

fix(critical): database.py uses correct settings.database_url_async property

fix(security): Enforce SECRET_KEY in prod, stronger password validation, fix config

fix(security): Real Fernet encryption for API keys, JWT secret enforcement, password validation

fix: Robust .env file discovery for Windows paths, add fix-db.ps1 reset script

feat: Q&A bank with AI answers, networking page, job map visualization, activity log middleware

feat: Add unit tests, production Docker, rate limiting, WebSocket notifications, data export (GDPR), error handling

feat: Complete project scaffold - backend (FastAPI) + frontend (Next.js 15) + scraper + LLM gateway