Security Fixes

backend/Dockerfile

@@ -19,7 +19,7 @@ RUN npm install && npm cache clean --force
 COPY . .
 
 # Build the application
-RUN npm run build:docker
+RUN npm run build
 
 # Stage 2: Production runtime
 FROM node:20-alpine AS production
@@ -30,8 +30,9 @@ RUN apk add --no-cache dumb-init
 # Set working directory
 WORKDIR /app
 
-# Copy package files
+# Copy package files and any lock file generated in builder stage
 COPY package*.json ./
+COPY --from=builder /app/package-lock.json ./
 
 # Install only production dependencies
 RUN npm ci --omit=dev && npm cache clean --force