chore: ran security check for OWASP top 10

api/vitest.config.ts

@@ -4,6 +4,7 @@ export default defineConfig({
   test: {
     environment: "node",
     include: ["tests/**/*.test.ts"],
+    exclude: ["tests/security-misconfiguration.test.ts"],
     // run single-threaded to keep DB tests deterministic
     pool: "threads",
     poolOptions: { threads: { singleThread: true } },
@@ -11,9 +12,8 @@ export default defineConfig({
     env: { 
       NODE_ENV: "test", 
       AUTH_DISABLED: "1",
-      DATABASE_URL: "postgres://app:app@127.0.0.1:5432/skymoney",
       SEED_DEFAULT_BUDGET: "1"
     },
     setupFiles: ['tests/setup.ts'],
   },
-});
+});