fix: Sprint 1b — null deref, supports_vision, empty response logging, test

fix(backend): Sprint Fix 2 — data integrity, error handling, robustness

fix(security+infra): Sprint Fix 1 — path traversal, docker-compose, CORS

fix(sprint-f1): sécurité — path traversal, SSRF, CORS, validation inputs