perf: hybrid AST+LLM taint tracer and tier 0 pre-filter

feat(scanner): sync dynamic secrets validation filters and entropy triaging

feat(hardening): deploy 5 surgical patches resolving TSConfig resolver, platform agnosticism, tenant isolation, SQL RLS Level 2, and LLM noise gate

fix(pipeline): implement lockfile pre-filters, taint confirmation flag overrides, update Semgrep configs and binary path lookup

fix(pipeline): implement lockfile pre-filters, taint confirmation flag overrides, and scanner self-exclusions

feat: secure Python backend engine v2.0