01Why should you never store plain-text passwords?
02What does JWT stand for?
03What is the difference between authentication and authorization?
04Where should production secrets like JWT_SECRET and database URLs be stored?
05What is input validation and why is it important?