Fix authorization bypass and input sanitization vulnerabilities in API routes#1

Draft

Copilot wants to merge 3 commits intomainfrom

copilot/fix-security-issue

Commits on Feb 28, 2026

Initial plan
Copilot
committed
Fix security vulnerabilities: add ownership checks, prevent userId spoofing, add auth to sendgrid, sanitize HTML

Copilot
and
aqzi
committed
Fix status codes for server errors and remove package-lock.json from tracking

Copilot
and
aqzi
committed