feat(auth): enhance password reset logging and Resend response tracking

feat(phase-7): implement FastAPI backend, React SPA frontend, and Docker deployment

fix(auth): enforce uniform response time floor and random jitter to neutralize network timing side-channels

fix(auth): harden password reset identity resolution, email uniqueness, timing protection, and TTL index

feat(auth): add secure rate-limited password reset flow with Resend email integration

feat(phase-6): implement atomic find_one_and_update rate limiting and concurrency test

fix(phase-6): resolve review findings for rate limiting and quota gating

feat(phase-6): implement rate limiting, daily search quotas, and brute-force lockout

fix(phase-5): enforce credential authentication gates and eliminate hardcoded JWT secrets

feat(phase-5): implement cryptographic JWT authentication and dual-key MongoDB user isolation

fix(phase-4): harden unique_facts source_id parsing and filter pseudo-command claims

feat(phase-4): implement Summarizer and Fact-Checker agents

fix(phase-3): sanitize XML attributes with html.escape and expand security test coverage

feat(phase-3): implement prompt injection defenses and security hardening

fix(phase-2): resolve console streaming, fallback visibility, and score-based dedup

feat(phase-2): add PlannerAgent and multi-search deduplication

feat(phase-1): implement two-agent proof of concept (Search + Writer)