fix: require client secrets and sanitize uploaded images

pyproject.toml

@@ -13,6 +13,7 @@ dependencies = [
   "aiosqlite>=0.20,<1",
   "uvicorn[standard]>=0.30,<1",
   "python-multipart>=0.0.9,<1",
+  "Pillow>=10.4,<13",
 ]
 
 [tool.setuptools.packages.find]