feat: Implement Phase 2 cross-cutting services with email and notification enhancements

- Refactor email verification and password reset utilities to use new email service.
- Introduce email delivery queue and notification delivery model for better tracking.
- Enhance file validation and storage services for improved security and ownership management.
- Add cron job for cleaning inactive notifications with retention policy.
- Update document worker to handle document generation and storage more efficiently.
- Implement logging improvements in activity and log workers.
- Create comprehensive documentation for new API endpoints and services.
- Add unit tests for file validation and notification policies to ensure robustness.

app/middleware/upload.middleware.js

@@ -16,23 +16,12 @@ const storage = multer.memoryStorage();
 
 // File filter (only images + PDFs)
 const fileFilter = (req, file, cb) => {
-    const allowedTypes = [
-    "image/",
-    "application/pdf",
-    "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", // .xlsx
-    "application/vnd.ms-excel" // .xls
-  ];
-
-  const isValid =
-    file.mimetype.startsWith("image/") ||
-    file.mimetype === "application/pdf" ||
-    file.mimetype === "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet" ||
-    file.mimetype === "application/vnd.ms-excel";
+  const isValid = ["image/jpeg", "image/png", "image/webp", "application/pdf", "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"].includes(file.mimetype);
 
   if (isValid) {
     cb(null, true);
   } else {
-    cb(new Error("Only images, PDFs, and Excel files are allowed"), false);
+    cb(new Error("Only JPEG, PNG, WebP, PDF, and XLSX files are allowed"), false);
   }
 };
 
@@ -41,7 +30,7 @@ const upload = multer({
   storage,
   fileFilter,
   limits: {
-    fileSize: 5 * 1024 * 1024, // max 5MB (global limit)
+    fileSize: Number(process.env.S3_MAX_UPLOAD_BYTES || 5 * 1024 * 1024),
   },
 });
 
@@ -61,4 +50,4 @@ module.exports = {
   uploadSingle,
   uploadMultiple,
   uploadFields,
-};
+};