feat(backend): security hardening + provider_api invariant + expanded API surface + alembic migrations

feat(backend): security hardening + provider_api invariant + expanded API surface + alembic migrations #153