ATP-Rankings-API

The server uses f-strings for SQLite table names in several database queries (e.g., `src/services.py`, `scripts/generate.py`, `scripts/filler.py`). While values are generally derived internally or validated against `sqlite_master`, this pattern is less robust against potential SQL injection than strictly parameterized queries for all components. Additionally, `src/main.py` uses `CORSMiddleware` with `allow_origins=["*"]`, which is a significant security risk for production deployments as it enables any domain to make cross-origin requests, requiring careful configuration for public access.