added db guard changes to prevent deletion

.gitea/workflows/security.yml

@@ -46,9 +46,21 @@ jobs:
           cd api
           npm ci
 
+      - name: Guard TEST_DATABASE_URL target
+        env:
+          TEST_DATABASE_URL: ${{ secrets.TEST_DATABASE_URL }}
+          EXPECTED_PROD_DB_NAME: skymoney
+          PROTECTED_DB_NAMES: skymoney,postgres,template0,template1
+          REQUIRE_TEST_DB_NAME: "1"
+        run: |
+          chmod +x ./scripts/validate-test-db-target.sh
+          bash ./scripts/validate-test-db-target.sh
+
       - name: Run OWASP security suite (DB-backed)
         env:
           TEST_DATABASE_URL: ${{ secrets.TEST_DATABASE_URL }}
+          PROTECTED_DB_NAMES: skymoney,postgres,template0,template1
+          REQUIRE_TEST_DB_NAME: "1"
         run: |
           cd api
           SECURITY_DB_TESTS=1 npx vitest run -c vitest.security.config.ts