feat(security): standardize security headers and CORS policy

.github/pull_request_template.md

@@ -1,35 +1,34 @@
-# 📌 Pull Request Description
+## Description
 
-## 🔗 Related Issue
+<!-- Briefly describe what this PR does -->
 
-Closes #
+## Related Issue
 
-## 📝 Description
+<!-- Link to the related issue -->
+Fixes #<!-- issue number -->
 
-Please include a summary of the changes and the related issue.
+## Type of Change
 
-## ✅ Type of Change
+- [ ] Bug fix (non-breaking change which fixes an issue)
+- [ ] New feature (non-breaking change which adds functionality)
+- [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
+- [ ] Documentation update
+- [ ] Configuration change
 
-* [ ] Bug fix
-* [ ] New feature
-* [ ] Documentation update
-* [x] Chore
-* [ ] UI/UX improvement
-* [ ] Other
+## Checklist
 
-## 🧪 Testing Done
+- [ ] My code follows the project's coding style
+- [ ] I have performed a self-review of my code
+- [ ] I have commented my code where necessary
+- [ ] I have updated the documentation accordingly
+- [ ] My changes generate no new warnings
+- [ ] I have added tests that prove my fix is effective or my feature works
+- [ ] New and existing unit tests pass locally with my changes
 
-* [ ] Tested locally
-* [ ] Existing functionality verified
-* [ ] No new warnings/errors introduced
+## Screenshots (if applicable)
 
-## 📸 Screenshots (if applicable)
+<!-- Add screenshots to show visual changes -->
 
-Add screenshots or proof here.
+## Additional Notes
 
-## ✔️ Checklist
-
-* [ ] My code follows the project guidelines
-* [ ] I reviewed my own changes
-* [ ] I linked the related issue
-* [ ] This PR targets the `gssoc` branch
+<!-- Any additional information that reviewers should know -->

Frontend/cypress/e2e/admin-settings.cy.js

@@ -1,3 +1,5 @@
+/* eslint-disable no-unused-vars */
+/* global describe, beforeEach, cy, it, expect, Cypress */
 describe('Admin Settings Page', () => {
   beforeEach(() => {
     cy.visit('/admin/settings');

Frontend/cypress/e2e/auto-close-timeline.cy.js

@@ -1,3 +1,5 @@
+/* eslint-disable no-unused-vars */
+/* global describe, beforeEach, cy, it, expect, Cypress */
 /**
  * E2E test suite — Auto-Close Ticket Notification & Timeline Workflows
  * Covers: WebSocket mocked events, status transitions, timeline rendering

Frontend/cypress/e2e/auto-close.cy.js

@@ -1,3 +1,5 @@
+/* eslint-disable no-unused-vars */
+/* global describe, beforeEach, cy, it, expect, Cypress */
 describe('Auto-Close Notification Workflows', () => {
   it('should display ticket status options', () => {
     cy.visit('/tickets');

Frontend/cypress/e2e/webhook-settings.cy.js

@@ -1,3 +1,5 @@
+/* eslint-disable no-unused-vars */
+/* global describe, beforeEach, cy, it, expect, Cypress */
 /**
  * E2E test suite — Webhook Definition Workflows
  * Covers: webhook form rendering, validation, persistence after submit

Frontend/cypress/support/commands.js

@@ -1,3 +1,5 @@
+/* eslint-disable no-unused-vars */
+/* global describe, beforeEach, cy, it, expect, Cypress */
 Cypress.Commands.add('login', (email, password) => {
   cy.visit('/login');
   cy.get('input[type="email"]').type(email);

Frontend/cypress/support/e2e.js

@@ -1,3 +1,5 @@
+/* eslint-disable no-unused-vars */
+/* global describe, beforeEach, cy, it, expect, Cypress */
 // Cypress E2E support commands
 import './commands';