fix: address post-audit review findings across docs and source

refactor(validation): remove SQL injection guards (no SQL database exists)

test fixes

Refactor app with security fixes, error handling, and type safety