Add CI quality gates for backend

**Title**
--
`ci: add backend workflow for lint, tests, and audit checks`
 
**Body**
No backend-specific CI gate exists. Add GitHub Actions workflow for linting, tests, and dependency checks.
 
**Acceptance Criteria**
- CI runs on pull requests touching backend.
- Lint + tests are required checks.
- Security audit step runs and reports output.


</body>
</html>