Add Bandit to CI pipeline and update security audit documentation

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

.env.demo

@@ -115,6 +115,8 @@ WEBDAV_FOLDER=/Documents/Uploads
 WEBDAV_VERIFY_SSL=True
 
 # FTP
+# Security Note: FTP_USE_TLS=True is strongly recommended for secure connections
+# Set FTP_ALLOW_PLAINTEXT=False in production to prevent unencrypted FTP
 FTP_HOST=ftp.example.com
 FTP_PORT=21
 FTP_USERNAME=ftp_user
@@ -124,6 +126,8 @@ FTP_USE_TLS=True
 FTP_ALLOW_PLAINTEXT=True
 
 # SFTP
+# Security Note: Set SFTP_DISABLE_HOST_KEY_VERIFICATION=false in production
+# When false, configure SSH known_hosts for proper host key verification
 SFTP_HOST=sftp.example.com
 SFTP_PORT=22
 SFTP_USERNAME=sftp_user
@@ -131,6 +135,10 @@ SFTP_PASSWORD=your_secure_sftp_password
 # SFTP_PRIVATE_KEY=/path/to/private_key.pem
 # SFTP_PRIVATE_KEY_PASSPHRASE=optional_passphrase
 SFTP_FOLDER=/Documents/Uploads
+SFTP_DISABLE_HOST_KEY_VERIFICATION=True  # Set to False in production for security
+
+# **HTTP Request Settings**
+HTTP_REQUEST_TIMEOUT=30  # Timeout for HTTP requests in seconds (default: 30)
 
 # **Notification Settings**
 # Configure notification services using Apprise URL format