chore: standardize security and quality foundations

frontend/next.config.js

@@ -1,4 +1,4 @@
-const backendUrl = process.env.BACKEND_INTERNAL_URL || 'http://backend:8000'
+const backendUrl = process.env.BACKEND_INTERNAL_URL || "http://backend:8000";
 
 /** @type {import('next').NextConfig} */
 const nextConfig = {
@@ -8,29 +8,29 @@ const nextConfig = {
   async headers() {
     return [
       {
-        source: '/:path*',
+        source: "/:path*",
         headers: [
-          { key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains' },
-          { key: 'X-Content-Type-Options', value: 'nosniff' },
-          { key: 'X-Frame-Options', value: 'DENY' },
-          { key: 'Referrer-Policy', value: 'no-referrer' },
-          { key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' },
+          { key: "Strict-Transport-Security", value: "max-age=31536000; includeSubDomains" },
+          { key: "X-Content-Type-Options", value: "nosniff" },
+          { key: "X-Frame-Options", value: "DENY" },
+          { key: "Referrer-Policy", value: "no-referrer" },
+          { key: "Permissions-Policy", value: "camera=(), microphone=(), geolocation=()" },
         ],
       },
       {
-        source: '/login',
-        headers: [{ key: 'Cache-Control', value: 'private, no-store, max-age=0' }],
+        source: "/login",
+        headers: [{ key: "Cache-Control", value: "private, no-store, max-age=0" }],
       },
-    ]
+    ];
   },
   async rewrites() {
     return [
       {
-        source: '/api/:path*',
+        source: "/api/:path*",
         destination: `${backendUrl}/:path*`,
       },
-    ]
+    ];
   },
-}
+};
 
-module.exports = nextConfig
+module.exports = nextConfig;