Backend hardening: structured logging, timeouts, memory leak fixes, compression, XSS fix

- Add pino structured logging with request IDs (X-Request-Id header)
- Add 30s timeout to acquirePage() and renderPdf/renderUrlPdf
- Add verification cache cleanup (every 15min) and rate limit cleanup (every 60s)
- Read version from package.json in health endpoint
- Add compression middleware
- Escape currency in templates (XSS fix)
- Add static asset caching (1h maxAge)
- Remove deprecated docker-compose version field
- Replace all console.log/error with pino logger

src/routes/health.ts

@@ -1,7 +1,11 @@
 import { Router } from "express";
+import { createRequire } from "module";
 import { getPoolStats } from "../services/browser.js";
 import { pool } from "../services/db.js";
 
+const require = createRequire(import.meta.url);
+const { version: APP_VERSION } = require("../../package.json");
+
 export const healthRouter = Router();
 
 healthRouter.get("/", async (_req, res) => {
@@ -38,7 +42,7 @@ healthRouter.get("/", async (_req, res) => {
 
   const response = {
     status: overallStatus,
-    version: "0.2.1",
+    version: APP_VERSION,
     database: databaseStatus,
     pool: {
       size: poolStats.poolSize,