feat: enhance security testing with vulnerability scanning and cfn-lint

[jfrench9]

Summary

This PR introduces comprehensive security improvements to our CI/CD pipeline by adding automated vulnerability scanning across all environments and implementing CloudFormation linting to ensure infrastructure security best practices.

Key Changes

• Added cfn-lint configuration (.cfnlintrc.yaml) to validate CloudFormation templates against AWS best practices and security standards
• Enhanced GitHub Actions workflows with vulnerability scanning capabilities across build, staging, production, and test environments
• Updated dependency management with security-focused package updates in package-lock.json
• Streamlined CloudFormation template with improved configuration

Workflow Improvements

• Build workflow: Added comprehensive security scanning and cfn-lint validation (46+ lines added)
• Test workflows: Integrated vulnerability checks into testing pipeline (30+ lines added)
• Production/Staging: Added security validation gates before deployment
• CI/Test: Enhanced with additional security checkpoints

Key UI/UX Improvements

• No direct UI changes in this PR
• Improved developer experience through early detection of security vulnerabilities
• Faster feedback loop for infrastructure configuration issues

Breaking Changes

⚠️ Potential Impact:

• CI/CD pipelines will now fail if security vulnerabilities are detected above configured thresholds
• CloudFormation deployments will be blocked if templates fail cfn-lint validation
• Teams should ensure their code passes new security gates before merging

Testing Notes for Reviewers

1. Verify cfn-lint configuration: Check that .cfnlintrc.yaml contains appropriate rules for our infrastructure
2. Test workflow changes: Ensure all GitHub Actions workflows still execute successfully
3. Security scanning: Confirm vulnerability scanning runs without blocking legitimate deployments
4. CloudFormation validation: Verify that existing CF templates pass the new linting rules

Browser Compatibility Considerations

• No browser-specific changes in this PR
• Security improvements are backend/infrastructure focused
• No impact on client-side functionality expected

Additional Notes

• This enhancement aligns with our security-first development approach
• Future deployments will have improved security posture
• Developers may need to address any existing vulnerabilities flagged by new scanning

---

🤖 Generated with Claude Code

Branch Info:

• Source: feature/security-test-improvements
• Target: main
• Type: feature

Co-Authored-By: Claude noreply@anthropic.com

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.