security: Add input validation and size limits for data ingestion

[nik-kale]

Summary

This PR adds comprehensive security controls for data ingestion, including path validation, size limits, and safe error handling. It also fixes the use of deprecated datetime.utcnow() throughout the codebase.

Changes

• Created autorca_core/validation.py module with security controls:
  • Path traversal prevention with validate_path()
  • File size limits with check_file_size()
  • Line length limits with check_line_length()
  • Total event count limits with check_total_events()
  • Error message sanitization with sanitize_error_message()
• Added IngestionLimits dataclass with configurable limits
• Updated load_logs() to use validation and limits
• Replaced all datetime.utcnow() with datetime.now(timezone.utc) (Python 3.12+ compatible)
• Added preset configurations: strict() and relaxed() limits
• Exported validation classes from package __init__.py

Type of Change

• Security patch (fixes security vulnerabilities)
• Bug fix (deprecated API usage)

Testing

Tested with various file sizes and paths. Verified that:

• Path traversal attempts are blocked
• Oversized files are rejected
• Deprecated datetime warnings are eliminated
• Error messages don't leak sensitive paths

Security Improvements

• Path Traversal Protection: Validates all file paths stay within expected directories
• Resource Exhaustion Prevention: Limits file sizes, line lengths, and total events
• Information Disclosure: Sanitizes error messages to avoid leaking paths
• Python 3.12+ Compatibility: Uses timezone-aware datetimes

Checklist

• Code follows project style guidelines
• Self-review completed
• No new warnings introduced
• Security improvements verified

Related Issues

Implements Feature #5 from feature roadmap

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.