Fix tenant isolation, default credentials, and resource limits

.github/workflows/ci.yml

@@ -43,3 +43,28 @@ jobs:
 
       - name: Audit all dependencies
         run: npm audit --audit-level=moderate
+
+  stress:
+    name: Stress and resilience scenarios
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      # Boots a throwaway server on a random port with a temp DATA_DIR, drives
+      # rate-limit / flood / slow-socket / sustained-load scenarios against it,
+      # and fails the job if any threshold is missed. See
+      # server/src/stress/README.md for what each scenario asserts.
+      - name: Run stress scenarios
+        run: npm run stress --workspace=server

client/package.json

@@ -15,7 +15,7 @@
     "lucide-react": "^0.378.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
-    "react-router-dom": "^6.30.4",
+    "react-router-dom": "^7.18.2",
     "recharts": "^2.12.7"
   },
   "devDependencies": {