#564 [MEDIUM] apps.py TOCTOU in update_app/delete_app/publish_version

Multiple TOCTOU race conditions in apps.py: 1) update_app(): SELECT then UPDATE without locking 2) delete_app(): SELECT then DELETE without locking 3) publish_version(): SELECT then UPDATE without locking. Fix: Use SELECT FOR UPDATE or INSERT ON CONFLICT for atomic operations.