fix: add http.Server timeouts to mitigate Slowloris (G112)

backend/main.go

@@ -502,8 +502,12 @@ func main() {
 	r.Post("/webhooks/square", webhooks.HandleSquareWebhook)
 
 	srv := &http.Server{
-		Addr:    ":8080",
+		Addr:              ":8080",
-		Handler: r,
+		Handler:           r,
+		ReadHeaderTimeout: 10 * time.Second,
+		ReadTimeout:       30 * time.Second,
+		WriteTimeout:      30 * time.Second,
+		IdleTimeout:       60 * time.Second,
 	}
 
 	quit := make(chan os.Signal, 1)