feat: upgrade scanner with route-middleware modeling, adaptive context triage, and memory scaling

fix: add synchronous scanning and optimize for Hugging Face Spaces 16GB memory

feat: sync proximity deduplication, max_iterations=10, timeout extensions, and secrets entropy fixes to backend

Fix VibeSec pipeline logic bugs, routing, feedback store, and RLS test cases

fix: resolve logic, security, and memory leak issues in scanner layers

refactor(backend): use asyncio and thread pools for background tasks, optimize scanner AST utils and checks

fix(pipeline): resolve container port binding, checkov execution path, and secrets scanner test path filtration

feat(scanner): sync dynamic secrets validation filters and entropy triaging

fix: bypass TruffleHog subprocess on large repositories or low-memory environments to prevent OOM

fix: use filesystem mode for TruffleHog secrets scan on shallow clones to prevent OOM

fix(scanner): resolve base64 file corruption and route classification bugs, sync AST upgrades

feat(secrets & sast & robustness): optimize Semgrep with community rules, remove TruffleHog verify filesystem filter, add LLM fail-open guards to prevent 429 pipeline crash

perf: Optimize TruffleHog secrets scanner with sequential concurrency and aggressive file ignores

fix(memory): limit Go runtime memory footprint using GOMEMLIMIT and GOGC environment variables to prevent container OOM crashes

fix(secrets): restore --only-verified to TruffleHog to prevent massive unverified heap allocations and container OOM crashes

feat(detection): target Semgrep on explicit production files and remove --only-verified from TruffleHog to detect simulated credentials

fix(secrets): add --trust-local-git-config to prevent remote re-clone hangs

perf(secrets): limit git secrets scanning history to 50 commits to optimize speed

feat(secrets): enable memory-safe deep git history secrets scanning using trufflehog git mode

feat: secure Python backend engine v2.0