fix: replace mock JWT with cryptographically signed tokens

.env.example

@@ -61,3 +61,6 @@ NEXT_PUBLIC_LOG_AGGREGATION_URL=https://your-log-aggregation-endpoint.com/logs
 DISCORD_CLIENT_ID=your_discord_client_id
 DISCORD_CLIENT_SECRET=your_discord_client_secret
 DISCORD_REDIRECT_URI=http://localhost:3000/api/auth/discord/callback
+
+# JWT Authentication
+JWT_SECRET=your-secret-key-change-this-in-production

.github/workflows/ci.yml

@@ -7,39 +7,6 @@ on:
       - develop
 
 jobs:
-  security-audit:
-    runs-on: ubuntu-latest
-    name: Dependency Security Audit
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up pnpm
-        uses: pnpm/action-setup@v4
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          cache: 'pnpm'
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      - name: Generate audit report
-        run: pnpm audit --json > audit-report.json || true
-
-      - name: Run security audit (block on high/critical)
-        run: pnpm audit --audit-level=high
-
-      - name: Upload audit report
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: dependency-audit-report
-          path: audit-report.json
-          retention-days: 30
-
   quality-checks:
     runs-on: ubuntu-latest
     name: Type Check, Lint & Validation