v1.1.2 Bump (Security, Alpine Fixes

[MickLesk]

✍️ Description

This PR hardens backend security and includes two targeted bug fixes.

What’s changed

• Added server-side auth enforcement for sensitive API/tRPC/WebSocket endpoints.

• Implemented requireApiAuth in multiple settings routes to enforce authentication.

• Added checks for setup completion in the authentication setup route.

• Enhanced error handling and response messages for better clarity.

• Prevented sensitive server data from being exposed in API responses.

• Fixed Alpine script path normalization to avoid double alpine- prefixes (e.g. alpine-alpine-...) and resulting 404s. Alpine install method double-prepends "alpine-" to slug, causing 404 (alpine-alpine-it-tools.sh) #596

Improved manual auto-sync error handling:

• PocketBase fetch failures and empty responses now return explicit diagnostic errors.

• Manual sync no longer reports success when the backend sync actually failed.
  Validation Bad error handling #587

• Targeted ESLint checks passed for changed files.

• Typecheck passed (tsc --noEmit)

• Upgraded various node packages

• Upgraded npm to 11.x

🔗 Related PR / Issue

Fixes: #

✅ Prerequisites (X in brackets)

• Self-review completed – Code follows project standards.
• Tested thoroughly – Changes work as expected.
• No security risks – No hardcoded secrets, unnecessary privilege escalations, or permission issues.

Screenshot for frontend Change

---

🛠️ Type of Change (X in brackets)

• 🐞 Bug fix – Resolves an issue without breaking functionality.
• ✨ New feature – Adds new, non-breaking functionality.
• 💥 Breaking change – Alters existing functionality in a way that may require updates.