feat(auth): implement login anomaly detection & security alerts

[Pranjal6955]

Summary

• What changed:
  • Added new PostgreSQL tables login_history and security_alerts along with mapping models LoginHistory and SecurityAlert in SQLAlchemy.
  • Implemented brute-force login detection using Redis rate limiting (blocking after 5 failed attempts in 15 minutes).
  • Implemented NEW_DEVICE_LOGIN verification by checking the real client X-Forwarded-For IP address against prior successful authentications.
  • Built out new private endpoints GET /auth/alerts and PATCH /auth/alerts/{alertId}/read to fetch and acknowledge generated warnings.
  • Integrated a new dynamic frontend UI inside the React Account.tsx page to display unresolved alerts prominently.
  • Updated backend tests in test_auth.py and openapi.yaml to ensure code coverage and OpenAPI standardizations.
• Why:
  • To secure user accounts from programmatic brute force stuffing attempts and proactively notify the end-user if their credentials were used on an unrecognized proxy/device, elevating the overall production readiness of FinMind's auth system.

Validation

• Frontend lint: cd app && npm run lint
• Frontend tests: cd app && npm test -- --runInBand
• Backend tests: ./scripts/test-backend.ps1
• Updated docs if needed (Swagger OpenAPI definitions & README.md have been fully updated with endpoints & caching policies)

Security and Ownership

• PR opened from a fork (not direct push to main)
• CODEOWNERS review requested

Checklist

• No secrets added
• No unrelated files changed
• Breaking changes documented

fixes #124
/claim #124

[Pranjal6955]

@rohitdash08 can u please review this PR

[rohitdash08]

@Pranjal6955 , are you still working on this ? could you please connect over discord to discuss this further @geekster007

[Pranjal6955]

@rohitdash08 sure

[rohitdash08]

@Pranjal6955 checks are failing please fix that also!

[Pranjal6955]

Okay

[rohitdash08]

@Pranjal6955 , I have told you the observation and things which we are expecting here for this feature over discord, also please fix the failing workflow
Thank you!