Fix explorer links, queue name, CORS, and security headers (#878, #877, #876, #875) (#982)

* fix: resolve explorer links, queue name, CORS, and security headers

- Fix blockchain explorer link generation (#878): Use blockchainHash instead of truncated UUID
- Fix blockchain recording processor queue name (#877): Align processor with service queue name
- Add proper CSP headers and security middleware (#876): CSP, X-Frame-Options, HSTS, Referrer-Policy, Permissions-Policy
- Implement proper CORS configuration (#875): Use CORS_ORIGINS env var, refuse wildcard in production

* fix: run tests sequentially to avoid database race condition

* fix: isolate database tests to prevent parallel race condition

---------

Co-authored-by: zainabbaba31-source <zainabbaba31-source@users.noreply.github.com>

Author: zainabbaba31-source

.github/workflows/ci.yml

@@ -94,7 +94,7 @@ jobs:
         DATABASE_URL: postgresql://postgres:postgres@localhost:5432/test
 
     - name: Run tests
-      run: npm test
+      run: npm run test:all
       env:
         DATABASE_URL: postgresql://postgres:postgres@localhost:5432/test
         JWT_SECRET: test-secret-key

jest.config.js

@@ -12,4 +12,5 @@ module.exports = {
   testEnvironment: 'node',
   testTimeout: 30000,
   passWithNoTests: true,
+  testPathIgnorePatterns: ['/test/database/'],
 };

package.json

@@ -18,6 +18,8 @@
     "start:prod": "node dist/main",
     "lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",
     "test": "jest",
+    "test:all": "jest && jest test/database --runInBand",
+    "test:database": "jest test/database --runInBand",
     "test:watch": "jest --watch",
     "test:cov": "jest --coverage",
     "test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand",