feat: update TrustedHostMiddleware to allow localhost and 127.0.0.1 in production

[ronibhakta1]

This pull request makes several improvements to the Docker build process and application security configuration. The most important changes are grouped below.

Docker build and runtime improvements:

• The uv sync command now uses the --no-dev flag to exclude development dependencies from the production build, reducing image size and attack surface. (Dockerfile)
• All files copied into the runtime image are now owned by the appuser user and group, improving container security by preventing file access by unintended users. (Dockerfile)
• The recursive chown command was removed from the runtime image build, as file ownership is now set during the COPY step. (Dockerfile)

Application middleware configuration:

• The TrustedHostMiddleware in FastAPI now allows requests from localhost and 127.0.0.1 in addition to the configured domain, improving local development and testing experience. (app/main.py)