fix: bcrypt 4.0 compatibility patch and support for passwords > 72 bytes

fix: add missing dependencies itsdangerous and starlette for session middleware

feat: integrate Google OAuth, ArXiv discovery and project-based analysis

Initial clean backend deployment