feat: comprehensive security and architecture improvements

- Add Zod validation schemas with strong password requirements (12+ chars, complexity)
- Implement rate limiting for authentication endpoints (registration, password reset)
- Remove duplicate MetricCard component, consolidate to ui/metric-card.tsx
- Update README.md to use pnpm commands consistently
- Enhance authentication security with 12-round bcrypt hashing
- Add comprehensive input validation for all API endpoints
- Fix security vulnerabilities in user registration and password reset flows

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

lib/schedulerConfig.ts

@@ -1,7 +1,10 @@
 // Legacy scheduler configuration - now uses centralized env management
 // This file is kept for backward compatibility but delegates to lib/env.ts
 
-import { getSchedulerConfig as getEnvSchedulerConfig, logEnvConfig } from "./env";
+import {
+  getSchedulerConfig as getEnvSchedulerConfig,
+  logEnvConfig,
+} from "./env";
 
 export interface SchedulerConfig {
   enabled: boolean;