defense-in-depth

Defense-in-depth security architecture with middleware chain, rate limiting, input validation, and security headers