issues/1010-1013: security headers, devcontainer, husky hooks, dev po…

[Daniel71250]

…rtal tests

• Implement security headers with HSTS and permissions policy #1010 add HSTS + Permissions-Policy security headers in backend and app.json
• Implement DevContainer configuration for instant dev setup #1013 add .devcontainer/devcontainer.json and .gitpod.yml
• Implement pre-commit hooks with lint-staged and commitlint #1012 wire commitlint into .husky/commit-msg (lint-staged + husky already present)
• Build developer portal with API playground and documentation #1011 add unit tests for developer portal service and store
• clean .gitignore for snapshots and test artifacts

Pull Request Checklist

Quality Gates (All must pass before merge)

• Lint: Code passes ESLint and Prettier checks
• Type Check: TypeScript compilation succeeds
• Tests: All tests pass
• Build: Project builds successfully
• Rust Format: Smart contract formatting is correct
• Rust Clippy: Smart contract linting passes
• Rust Tests: All smart contract tests pass
• Rust Build: Smart contracts compile successfully

Additional Requirements

• New code has appropriate TypeScript types
• No hardcoded secrets or credentials
• New features have corresponding tests
• Documentation updated if needed

Reviewers

• At least 1 approval required for merge
• All CI checks must be green

---

This PR will not be mergeable until all quality gates pass.
closes
closes #1010
closes #1011
closes #1012
closes #1013

[drips-wave]

@Daniel71250 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits