Fix security vulnerabilities and add early dependency scanning

- Update to node:20-alpine base image
- Add apk upgrade to fix OS-level vulnerabilities
- Update npm to latest to fix bundled package vulnerabilities
- Add scan-deps job that runs in parallel with tests
- Replace deprecated --only=production with --omit=dev

Dockerfile

@@ -1,8 +1,12 @@
-FROM node:18-alpine
+FROM node:20-alpine
 
 # Set working directory
 WORKDIR /app
 
+# Update Alpine packages and npm to fix security vulnerabilities
+RUN apk upgrade --no-cache && \
+    npm install -g npm@latest
+
 # Install Curl
 RUN apk add --no-cache curl
 
@@ -10,7 +14,7 @@ RUN apk add --no-cache curl
 COPY package*.json ./
 
 # Install dependencies
-RUN npm ci --only=production
+RUN npm ci --omit=dev
 
 # Copy source code
 COPY . .