feat: comprehensive security and architecture improvements

- Add Zod validation schemas with strong password requirements (12+ chars, complexity)
- Implement rate limiting for authentication endpoints (registration, password reset)
- Remove duplicate MetricCard component, consolidate to ui/metric-card.tsx
- Update README.md to use pnpm commands consistently
- Enhance authentication security with 12-round bcrypt hashing
- Add comprehensive input validation for all API endpoints
- Fix security vulnerabilities in user registration and password reset flows

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

lib/scheduler.ts

@@ -8,11 +8,13 @@ export function startCsvImportScheduler() {
   const config = getSchedulerConfig();
 
   if (!config.enabled) {
-    console.log('[CSV Import Scheduler] Disabled via configuration');
+    console.log("[CSV Import Scheduler] Disabled via configuration");
     return;
   }
 
-  console.log(`[CSV Import Scheduler] Starting with interval: ${config.csvImport.interval}`);
+  console.log(
+    `[CSV Import Scheduler] Starting with interval: ${config.csvImport.interval}`
+  );
 
   cron.schedule(config.csvImport.interval, async () => {
     const companies = await prisma.company.findMany();