chore: clean up codebase for production readiness

- Remove all console.log/debug statements from production code
- Add NODE_ENV checks for development-only logging
- Remove test scripts (test-feedback, test-image-security, test-backup-*, test-restore)
- Remove one-time fix scripts (fix-temp-photos, fix-migration-state, mark-migration-applied)
- Remove sensitive files (.env.backup, ADMIN_CREDENTIALS.txt)
- Update package.json to remove references to deleted scripts
- Replace console statements with logger utility in backend
- Secure error boundaries to not expose stack traces in production

This makes the codebase production-ready with no debug output or test scripts.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

backend/src/services/feedbackService.js

@@ -120,7 +120,7 @@ class FeedbackService {
       }
       
       // Insert new feedback
-      const [id] = await db('photo_feedback').insert({
+      const result = await db('photo_feedback').insert({
         photo_id: photoId,
         event_id: eventId,
         feedback_type,
@@ -134,7 +134,9 @@ class FeedbackService {
         is_approved: feedback_type !== 'comment' || !feedbackData.moderate_comments,
         created_at: new Date(),
         updated_at: new Date()
-      });
+      }).returning('id');
+      
+      const id = result[0]?.id || result[0];
       
       // Update photo stats
       await this.updatePhotoFeedbackStats(photoId);
@@ -175,7 +177,7 @@ class FeedbackService {
       
       const feedback = await query
         .orderBy('created_at', 'desc')
-        .select('id', 'feedback_type', 'rating', 'comment_text', 'guest_name', 'created_at');
+        .select('id', 'feedback_type', 'rating', 'comment_text', 'guest_name', 'created_at', 'is_approved', 'is_hidden');
       
       return feedback;
     } catch (error) {