Add HTTP security headers and CORS defaults

package-lock.json

@@ -14,7 +14,8 @@
       "dependencies": {
         "@nestjs/throttler": "^6.5.0",
         "class-transformer": "^0.5.1",
-        "class-validator": "^0.15.1"
+        "class-validator": "^0.15.1",
+        "helmet": "^8.1.0"
       },
       "devDependencies": {
         "@release-it/bumper": "^7.0.1",
@@ -14434,6 +14435,14 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/helmet": {
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.1.0.tgz",
+      "integrity": "sha512-jOiHyAZsmnr8LqoPGmCjYAaiuWwjAPLgY8ZX2XrmHawt99/u1y6RgrZMTeoPfpUbV96HOalYgz1qzkRbw54Pmg==",
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
     "node_modules/himalaya": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/himalaya/-/himalaya-1.1.1.tgz",