fix: resolve bandit security issues and fix vitest configuration (#132)

apps/api/app/api/routes/chunked_upload.py

@@ -9,6 +9,7 @@ import logging
 import os
 import shutil
 from datetime import datetime, timedelta, timezone
+import tempfile
 from pathlib import Path
 from typing import Any
 from uuid import uuid4
@@ -59,7 +60,7 @@ ALLOWED_MIME_TYPES = {
 }
 
 # Chunk storage root directory
-CHUNK_STORAGE_ROOT = Path("/tmp/chunked_uploads")
+CHUNK_STORAGE_ROOT = Path(tempfile.gettempdir()) / "chunked_uploads"
 
 
 def _get_chunk_dir(upload_id: str) -> Path: