Fix/rpc connection timeout

[Sundriveauto]

Closed #473

Backend Stellar RPC calls in sorobanService.ts use the SDK's default 30-second transaction timeout but do not configure socket-level connection timeouts. If the RPC node is slow or hangs after accepting the connection, the request never times out and the caller waits indefinitely. This can exhaust the Node.js event loop and cause all subsequent requests to queue up.

@ogazboiz pls review Pr

[ogazboiz]

The RPC timeout implementation is a good fix. Two things before this can merge:

1. Remove .kiro/settings/lsp.json
This is an IDE settings file from the Kiro editor and should not be in the repo:

git rm -r .kiro/
echo '.kiro/' >> .gitignore
git commit -m 'chore: remove Kiro IDE settings, add to gitignore'

2. CI needs approval
Push the fix above and a maintainer will approve the CI run.

[ogazboiz]

The codebase issues on main have been resolved and all CI checks are passing now. Please rebase your branch to pull in the latest changes before continuing. Thanks for your patience.

[Sundriveauto]

@ogazboiz Pls review Pr

[ogazboiz]

Committed a .kiro/settings/lsp.json editor config file, remove it. Massive package-lock.json noise from npm version mismatch. The timeout tests don't actually test the real fetchWithTimeout function. The rpcCall wrapper on the last line has an unclosed parenthesis. Fix and trigger CI.

[Sundriveauto]

@ogazboiz pls review

[ogazboiz]

All four feedback items addressed, nice work. The diff is clean now. One thing: CI hasn't run on this branch. Push an empty commit to trigger it: git commit --allow-empty -m 'trigger CI' && git push

[Sundriveauto]

@ogazboiz review

[ogazboiz]

heads up, a few important changes just landed on main that affect your PR:

1. axios pinned to 1.13.5 - there's an active supply chain attack on axios 1.14.1 (pulls in confirmed malware). we added overrides in all package.json files to block it.

2. CI now runs a supply chain audit before backend/frontend jobs. if your lockfile has a compromised package, CI will fail with a clear error.

3. backend test fixes - loanEndpoints tests now use valid Stellar addresses and base64 strings. if your PR was failing backend CI but you didn't touch backend code, this should fix it after rebase.

please rebase on latest main:

git fetch upstream
git rebase upstream/main
git push --force-with-lease

[Sundriveauto]

@ogazboiz rebase done

[ogazboiz]

hey @Sundriveauto, the RPC timeout with AbortController is a solid fix. the fetchWithTimeout wrapper and tests look good. merging!

if you want to keep contributing or follow up on open issues, join us on Telegram: https://t.me/+DOylgFv1jyJlNzM0

[ogazboiz]

hey @Sundriveauto, approved and ready to merge but there's a small conflict now (likely .gitignore overlap with #601 which just merged). quick rebase should fix it:

git fetch upstream
git rebase upstream/main
git push --force-with-lease

will merge as soon as it's clean.