block swagger routes

[stefangutica]

Reasoning

• Prevent the exposure of internal application data (project structure, dependency versions) via direct access to package.json files.
• Static routes generated by Swagger publicly exposed these files, representing an information disclosure/security risk.

Proposed Changes

• Added RestrictedRoutesMiddleware configured to intercept and block a specific array of sensitive routes.
• The middleware forces an immediate 404 Not Found response for /docs/package.json and /package.json.
• Registered the middleware at the topmost level in main.ts (directly on the Express instance) before Swagger initialization, using .bind() to preserve the class context.

How to test

• Access http://localhost:<port>/package.json in a browser or Postman -> Verify it returns a 404 Not Found.
• Access http://localhost:<port>/docs/package.json -> Verify it returns a 404 Not Found.
• Access the Swagger UI (http://localhost:<port>/docs) and standard API endpoints -> Verify they load and function normally without being blocked.

[github-actions]

k6 load testing comparison.
Base Commit Hash: 79b2062
Target Commit Hash: aa70442

Metric	Base				Target				Diff
	Avg	Max	90	95	Avg	Max	90	95	Avg	Max	90	95
Nodes	67.86	444.56	71.93	75.52	97.76	21003.88	68.25	74.22	+44.07% 🔴	+4624.64% 🔴	-5.12% ✅	-1.72% ✅
Tokens	68.56	1317.07	72.02	75.34	52.77	194.47	65.63	68.53	-23.04% ✅	-85.23% ✅	-8.87% ✅	-9.04% ✅
Transactions	81.72	2475.84	72.61	77.96	120.62	23801.65	68.99	79.94	+47.59% 🔴	+861.36% 🔴	-4.99% ✅	+2.54% 🔴
Mex	68.99	1530.78	71.97	75.28	53.60	784.88	65.69	68.77	-22.30% ✅	-48.73% ✅	-8.73% ✅	-8.64% ✅
Blocks	78.28	736.44	72.77	79.48	63.31	1722.92	66.80	72.50	-19.13% ✅	+133.95% 🔴	-8.20% ✅	-8.78% ✅
Accounts	69.24	1429.08	71.94	75.01	54.46	1262.69	65.80	69.10	-21.34% ✅	-11.64% ✅	-8.54% ✅	-7.89% ✅
Pool	67.90	467.68	72.11	75.19	52.99	307.82	65.64	68.54	-21.96% ✅	-34.18% ✅	-8.98% ✅	-8.84% ✅
Test Run Duration	60003.49				60004.66

Legend: Avg - Average Response Time, Max - Maximum Response Time, 90 - 90th Percentile, 95 - 95th Percentile
All times are in milliseconds.