Switch to SQLite-backed session storage, cleanup third-party dependencies, and refine CSP for restricted external assets.

package.json

@@ -11,7 +11,10 @@
     "dev": "node --env-file-if-exists=.env --watch server.js",
     "user:role": "node --env-file-if-exists=.env scripts/set-role.js",
     "lint": "eslint .",
-    "test": "node --test",
+    "test": "npm run test:ci",
+    "test:backend": "node scripts/run-tests.js backend",
+    "test:frontend": "node scripts/run-tests.js frontend",
+    "test:ci": "npm run test:backend && npm run test:frontend",
     "test:browser": "node scripts/browser-tests.js"
   },
   "dependencies": {
@@ -23,7 +26,6 @@
     "express-session": "^1.17.3",
     "multer": "^2.4.0",
     "qs": "^6.15.0",
-    "session-file-store": "^1.5.0",
     "sharp": "^0.35.4"
   },
   "devDependencies": {