fix: insecure randomness

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Dockerfile

@@ -7,6 +7,12 @@ RUN npm ci
 ARG PUBLIC_LANDING_INFO
 ENV PUBLIC_LANDING_INFO=$PUBLIC_LANDING_INFO
 
+ARG LOG_PRETTY
+ENV LOG_PRETTY=$LOG_PRETTY
+
+ARG LOG_LEVEL
+ENV LOG_LEVEL=$LOG_LEVEL
+
 COPY . .
 
 RUN npm run build

src/lib/generateUserId.ts

@@ -1,5 +1,8 @@
+import { randomBytes } from 'crypto';
+
 export const generateUserId = () => {
-	const userId = 'user_' + Date.now() + '_' + Math.random().toString(36).substr(2, 9);
+	const secureRandomString = randomBytes(8).toString('base36').substr(0, 9);
+	const userId = 'user_' + Date.now() + '_' + secureRandomString;
 
 	return userId;
 };