Issue: Disable Swagger API documentation in production environment

[NahomAlemu]

Description

The Swagger API documentation at /api/docs is exposed unconditionally in all environments.

Risk: In production, this exposes:

• All API endpoints and their schemas
• Authentication mechanisms
• A detailed attack surface map

Tasks

Tasks:

• Conditionally enable Swagger only in non-production environments.

Visual Aids

No response

[NahomAlemu]

I've completed my practicum and will no longer be working on this. I'm unassigning myself so someone else can pick it up if needed. My progress can be found in the closed PR #185