Dependency Updates: Modernize and pin dependencies

[OneByJorah]

Dependency Updates Gap

Current State: Dependencies are outdated and not pinned to exact versions in some cases.

Backend (requirements.txt):

• flask==3.1.1 (current: 3.0.3)
• flask-cors==5.0.1 (current: 4.0.1)
• flask-jwt-extended==4.7.1 (current: 4.6.0)
• flask-socketio==5.5.1 (current: 5.3.6)
• flask-limiter==3.10.1 (current: 3.7.0)
• bcrypt==4.3.0 (current: 4.2.0)
• python-dotenv==1.1.0 (current: 1.0.1)
• requests==2.32.3 (current: 2.31.0)
• python-multipart==0.0.20 (current: 0.0.18)
• werkzeug==3.1.3 (current: 3.0.3)
• gunicorn==23.0.0 (current: 21.2.0)
• psycopg2-binary==2.9.10 (current: 2.9.9)
• redis==5.2.1 (current: 5.0.1)
• apscheduler==3.11.0 (current: 3.10.4)
• eventlet==0.39.1 (current: 0.35.0)

Frontend (package.json):

• react 18.3.1 (latest: 18.3.1 - OK)
• react-dom 18.3.1 (latest: 18.3.1 - OK)
• react-scripts 5.0.1 (deprecated, consider Vite)
• react-router-dom 6.28.0 (latest: 6.28.0 - OK)
• socket.io-client 4.7.5 (latest: 4.8.1)
• axios 1.7.7 (latest: 1.7.8)
• recharts 2.13.3 (latest: 2.15.0)
• hls.js 1.5.15 (latest: 1.5.17)
• react-hot-toast 2.4.1 (latest: 2.5.2)

Required:

1. Update all dependencies to latest secure versions
2. Pin exact versions (no caret/tilde)
3. Add dependabot.yml for automated updates
4. Add npm audit / pip-audit to CI
5. Review deprecated packages (react-scripts)

Priority: MEDIUM