refactor: reorganize struct fields, add new handlers and storage backends

- [x] Reorder struct fields across codebase for consistency
- [x] Add analytics event handlers and tests
- [x] Add authentication API key management handlers and tests
- [x] Add pre-warming control handlers and tests
- [x] Implement S3 storage backend with tests
- [x] Implement SMB/CIFS storage backend with tests
- [x] Add CDN middleware tests
- [x] Integrate analytics tracking into cache manager
- [x] Add S3 and SMB storage initialization in app setup
- [x] Add CDN caching to proxy handlers
- [x] Remove distributed locking (Redis lock manager)
- [x] Remove proxy common package and utilities
- [x] Remove standalone HTTP server package
- [x] Remove logger middleware
- [x] Simplify error handling utilities
- [x] Update config with S3 and SMB options
- [x] Update cache manager signature to include analytics

pkg/scanner/ghsa/ghsa.go

@@ -20,8 +20,8 @@ const ScannerName = "github-advisory-database"
 
 // Scanner implements the GitHub Advisory Database vulnerability scanner
 type Scanner struct {
-	config     config.GHSAConfig
 	httpClient *http.Client
+	config     config.GHSAConfig
 }
 
 // New creates a new GitHub Advisory Database scanner
@@ -257,10 +257,10 @@ type GHSAAdvisory struct {
 	Description     string              `json:"description"`
 	Severity        string              `json:"severity"`
 	HTMLURL         string              `json:"html_url"`
-	References      []GHSAReference     `json:"references"`
-	Vulnerabilities []GHSAVulnerability `json:"vulnerabilities"`
 	PublishedAt     string              `json:"published_at"`
 	UpdatedAt       string              `json:"updated_at"`
+	References      []GHSAReference     `json:"references"`
+	Vulnerabilities []GHSAVulnerability `json:"vulnerabilities"`
 }
 
 type GHSAReference struct {
@@ -268,9 +268,9 @@ type GHSAReference struct {
 }
 
 type GHSAVulnerability struct {
+	FirstPatchedVersion *GHSAPatchVersion `json:"first_patched_version"`
 	Package             GHSAPackage       `json:"package"`
 	VulnerableVersions  string            `json:"vulnerable_version_range"`
-	FirstPatchedVersion *GHSAPatchVersion `json:"first_patched_version"`
 }
 
 type GHSAPackage struct {

pkg/scanner/grype/grype.go

@@ -153,9 +153,9 @@ func (s *Scanner) convertGrypeResult(grypeResult *GrypeResult, registry, package
 
 // GrypeResult represents Grype JSON output structure
 type GrypeResult struct {
-	Matches    []GrypeMatch    `json:"matches"`
-	Descriptor GrypeDescriptor `json:"descriptor"`
 	Source     GrypeSource     `json:"source"`
+	Descriptor GrypeDescriptor `json:"descriptor"`
+	Matches    []GrypeMatch    `json:"matches"`
 }
 
 type GrypeDescriptor struct {
@@ -164,13 +164,13 @@ type GrypeDescriptor struct {
 }
 
 type GrypeSource struct {
-	Type   string                 `json:"type"`
 	Target map[string]interface{} `json:"target"`
+	Type   string                 `json:"type"`
 }
 
 type GrypeMatch struct {
-	Vulnerability GrypeVulnerability `json:"vulnerability"`
 	Artifact      GrypeArtifact      `json:"artifact"`
+	Vulnerability GrypeVulnerability `json:"vulnerability"`
 }
 
 type GrypeVulnerability struct {

pkg/scanner/npmaudit/npmaudit.go

@@ -199,9 +199,9 @@ func (s *Scanner) convertResult(auditResult *NpmAuditResult, registry, packageNa
 
 // NpmAuditResult represents npm audit JSON output
 type NpmAuditResult struct {
-	AuditReportVersion int                         `json:"auditReportVersion"`
 	Vulnerabilities    map[string]NpmVulnerability `json:"vulnerabilities"`
 	Metadata           NpmAuditMetadata            `json:"metadata"`
+	AuditReportVersion int                         `json:"auditReportVersion"`
 }
 
 type NpmVulnerability struct {

pkg/scanner/osv/osv.go

@@ -25,8 +25,8 @@ const (
 
 // Scanner implements the Scanner interface using OSV.dev API
 type Scanner struct {
-	config     config.OSVConfig
 	httpClient *http.Client
+	config     config.OSVConfig
 }
 
 // OSVRequest represents the request structure for OSV API
@@ -48,13 +48,13 @@ type OSVResponse struct {
 
 // OSVVulnerability represents a vulnerability in OSV format
 type OSVVulnerability struct {
+	DatabaseSpecific map[string]interface{} `json:"database_specific,omitempty"`
 	ID               string                 `json:"id"`
 	Summary          string                 `json:"summary"`
 	Details          string                 `json:"details"`
 	Severity         []OSVSeverity          `json:"severity,omitempty"`
 	References       []OSVReference         `json:"references,omitempty"`
 	Affected         []OSVAffected          `json:"affected"`
-	DatabaseSpecific map[string]interface{} `json:"database_specific,omitempty"`
 }
 
 // OSVSeverity represents severity information
@@ -71,11 +71,11 @@ type OSVReference struct {
 
 // OSVAffected represents affected package versions
 type OSVAffected struct {
+	DatabaseSpecific  map[string]interface{} `json:"database_specific,omitempty"`
+	EcosystemSpecific map[string]interface{} `json:"ecosystem_specific,omitempty"`
 	Package           PackageInfo            `json:"package"`
 	Ranges            []OSVRange             `json:"ranges,omitempty"`
 	Versions          []string               `json:"versions,omitempty"`
-	DatabaseSpecific  map[string]interface{} `json:"database_specific,omitempty"`
-	EcosystemSpecific map[string]interface{} `json:"ecosystem_specific,omitempty"`
 }
 
 // OSVRange represents version ranges

pkg/scanner/rescanner.go

@@ -11,11 +11,11 @@ import (
 
 // RescanWorker handles periodic re-scanning of cached packages
 type RescanWorker struct {
-	manager       *Manager
 	metadataStore metadata.MetadataStore
 	storage       storage.StorageBackend
-	interval      time.Duration
+	manager       *Manager
 	stopCh        chan struct{}
+	interval      time.Duration
 }
 
 // NewRescanWorker creates a new rescan worker

pkg/scanner/scanner.go

@@ -36,10 +36,10 @@ type DatabaseUpdater interface {
 
 // Manager manages multiple security scanners
 type Manager struct {
+	metadataStore metadata.MetadataStore
+	config        config.SecurityConfig
 	scanners      []Scanner
 	enabled       bool
-	config        config.SecurityConfig
-	metadataStore metadata.MetadataStore
 }
 
 // New creates a new scanner manager with configured scanners

pkg/scanner/trivy/trivy.go

@@ -25,18 +25,18 @@ type Scanner struct {
 
 // TrivyResult represents Trivy JSON output structure
 type TrivyResult struct {
-	SchemaVersion int               `json:"SchemaVersion"`
+	Metadata      TrivyMetadata     `json:"Metadata"`
 	ArtifactName  string            `json:"ArtifactName"`
 	ArtifactType  string            `json:"ArtifactType"`
-	Metadata      TrivyMetadata     `json:"Metadata"`
 	Results       []TrivyVulnResult `json:"Results"`
+	SchemaVersion int               `json:"SchemaVersion"`
 }
 
 type TrivyMetadata struct {
 	OS          *TrivyOS          `json:"OS,omitempty"`
+	ImageConfig *TrivyImageConfig `json:"ImageConfig,omitempty"`
 	RepoTags    []string          `json:"RepoTags,omitempty"`
 	RepoDigests []string          `json:"RepoDigests,omitempty"`
-	ImageConfig *TrivyImageConfig `json:"ImageConfig,omitempty"`
 }
 
 type TrivyOS struct {
@@ -64,8 +64,8 @@ type TrivyVulnerability struct {
 	Severity         string   `json:"Severity"`
 	Title            string   `json:"Title"`
 	Description      string   `json:"Description"`
-	References       []string `json:"References"`
 	PrimaryURL       string   `json:"PrimaryURL"`
+	References       []string `json:"References"`
 }
 
 // New creates a new Trivy scanner