Add preparation time and recipe search

[rbola]

Adds prep time getter and a recipe search endpoint.

[cursor]

Convention and security review

Reviewed the full PR diff against .cursor/rules/bitebyte-conventions.mdc.

Findings

Category	Location	Finding
Naming	src/main/java/com/main/bitebyte/recipe/RecipeController.java:60	@GetMapping("/search") adds an action-style endpoint under recipes. The BiteByte REST convention requires plural resource nouns such as /recipes and /recipes/{id}; consider exposing search as a query on the recipes collection, e.g. GET /api/recipes?name=....
Naming	src/main/java/com/main/bitebyte/recipe/Recipe.java:109	get_prep_time() uses snake_case. Java methods must use camelCase; rename this to a camelCase accessor such as getPrepTimeMinutes().
Security	src/main/java/com/main/bitebyte/recipe/Recipe.java:26-27	MONGO_URI hardcodes a MongoDB connection string with credentials in source. Move connection strings/secrets to environment variables or a secret manager, and ensure no real credential remains in source control.
Security	src/main/java/com/main/bitebyte/recipe/RecipeController.java:62-65	Raw @RequestParam String name is passed directly into Criteria.where("name").regex(name) and then mongoTemplate.find(...) with no validation or bounding. Validate and bound the input before querying, and escape/quote user text if regex matching is still needed.

  

_{Sent by Cursor Automation: BiteByte PR Security Review}