Feature/phase 3 kailash security

[KailashNp]

Summary

Implements the Phase 3 dynamic API Security Tester (validating auth bypass, rate limiting, and sessions) and refactors the static Auth Scanner to use AST parsing and Row Level Security SQL analysis.

Scanner / Component

• Secret Scanner
• Dependency Scanner
• Pattern Scanner
• Auth Scanner
• Reporter
• Other: APISecurityTester (Dynamic Security Verification Suite)

Checklist

• make lint passes (ruff + mypy clean)
• make test passes (no red tests)
• New tests added for new behavior
• No hardcoded secrets or test credentials committed
• False positive rate checked against clean_repo fixture
• Daily report updated in reports/YYYY-MM-DD.md (updated in daily log logs/2026-06-11-Kailash.md)

Test output

============================= test session starts =============================
platform win32 -- Python 3.14.4, pytest-9.0.3, pluggy-1.6.0
rootdir: C:\Users\kaila\Desktop\amity\lifeatlas2\zeroclaw-scanner
configfile: pyproject.toml
plugins: anyio-4.13.0, asyncio-1.3.0

tests/test_api_security_tester.py ......                                 [ 14%]
tests/test_auth_scanner.py ..........                                    [ 38%]
tests/test_dependency_scanner.py ..                                      [ 42%]
tests/test_pattern_scanner.py ...........                                [ 69%]
tests/test_secret_scanner.py ...........                                 [ 95%]
tests/test_smoke.py ..                                                   [100%]

======================= 42 passed in 1.83s =======================