Static analysis security

Hardened execution guardrails — because production only gets one chance. · Deterministic local checks for risky code patterns and metadata mismatches.