Verify Usage of Security and Metrics Middleware in TypeScript Service

[davideme]

Following the dependency review against the ADRs, we need to confirm that the installed security and metrics middleware are actively being used and configured correctly in the TypeScript service codebase.

Tasks:

• Check the Express application setup code (likely src/typescript/src/index.ts or related server/app setup files).
• Verify that helmet() middleware is applied.
• Verify that express-rate-limit middleware is configured and applied (potentially to specific routes or globally).
• Verify that the Prometheus metrics middleware (express-prometheus-metrics or similar) is applied to expose a /metrics endpoint.
• Ensure configurations are sensible defaults or align with project requirements.

This task ensures the codebase matches the intent documented in ADR-007 (Metrics) and ADR-008.