test: add API security tests using Bright

[derevnjuk]

Description

• Added security tests using Bright's SecTester for various API endpoints.

Test Plan

• Ensure the Bright API key is set in the environment variables.
• Run the security tests using the provided test scripts.
• Validate that the tests cover the specified endpoints and check for vulnerabilities.

Endpoints Tested

• GET http://localhost:3000/api/articles
• GET http://localhost:3000/api/articles/feed
• GET http://localhost:3000/api/articles/slug-example
• POST http://localhost:3000/api/articles
• PUT http://localhost:3000/api/articles/slug-example
• DELETE http://localhost:3000/api/articles/slug-example
• POST http://localhost:3000/api/articles/slug-example/favorite
• DELETE http://localhost:3000/api/articles/slug-example/favorite
• GET http://example.com/api/articles/sample-article/comments
• POST http://example.com/api/articles/sample-article/comments
• DELETE http://example.com/api/articles/sample-article/comments/123
• GET /profiles/johndoe
• POST /profiles/johndoe/follow
• DELETE /profiles/johndoe/follow
• POST /sentiment/score
• GET http://localhost:3000/tags
• POST /api/users/login
• POST /api/users
• GET /api/user
• PUT /api/user

Types of Security Checks

• SQL Injection
• XSS Vulnerabilities
• Authentication Bypass

Checklist

• Tests implemented
• Documentation updated