HDU Information Security Lab 1: secure Flask REST API (JWT, bcrypt, SQLi/XSS protection) with SAST/SCA in GitHub Actions