Firebase Authentication

[jta15]

• Integrated firebase admin for a server side ID token verification
• added require_auth middleware
• secured api goals, profile and dashboard with bearer-token gates
• linked firebase to out database
• updated requirements

[github-actions]

🔒 Security Scan Results

🔒 Security Scan Results
=========================

Bandit Scan Results:
-------------------
Run started:2025-09-14 14:54:48.758090

Test results:
	No issues identified.

Code scanned:
	Total lines of code: 1174
	Total lines skipped (#nosec): 0
	Total potential issues skipped due to specifically being disabled (e.g., #nosec BXXX): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 14
		Medium: 0
		High: 0
	Total issues (by confidence):
		Undefined: 0
		Low: 0
		Medium: 0
		High: 14
Files skipped (0):

Dependency Check Results:
-----------------------

✅ No critical security issues detected.

The code has passed all critical security checks.

[jd-deakin]

Reviewed, changes look good.