sast-surface

SAST Round 2: Attack Surface — Deep-dive entry points, map sources/sinks, pattern-match vulnerabilities, review auth/authz.