validate report attachment by file mime type

package-lock.json

@@ -19,6 +19,7 @@
         "bcrypt": "^6.0.0",
         "daisyui": "^5.7.50",
         "drizzle-orm": "^0.45.4",
+        "mime": "^4.1.2",
         "mysql2": "^3.24.6",
         "nanostores": "^1.5.5",
         "pino": "^10.4.0",
@@ -5576,6 +5577,21 @@
         "url": "https://github.com/sponsors/jonschlinkert"
       }
     },
+    "node_modules/mime": {
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/mime/-/mime-4.1.2.tgz",
+      "integrity": "sha512-ikRzZ2RwbUVDyL9SsU0f2Phcmav4yq5r8faH5ZZKHtOZrMBLnrQOrj0uvqZ5R1uQnj+RO7Wcklw/lAf81mP9LQ==",
+      "funding": [
+        "https://github.com/sponsors/broofa"
+      ],
+      "license": "MIT",
+      "bin": {
+        "mime": "bin/cli.js"
+      },
+      "engines": {
+        "node": ">=16"
+      }
+    },
     "node_modules/mime-db": {
       "version": "1.54.0",
       "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz",