fix(sast): suppress false-positive security signatures across core en…

[squid-protocol]

…gines

• Added inline directives across controllers, metric processors, and recorders to resolve the static analysis paradox (GitGalaxy flagging its own expected OS/DB operations).
• Silenced false-positive alerts for RCE (subprocess), database hooks (sqlite3), network I/O, state mutation, and literal threat strings.
• Intentionally retained ai_guardrails enforcement on massive/coupled files to preserve Zero-Trust Human-in-the-Loop boundaries for autonomous agents.

Description of Structural Changes

Visual Observatory Testing

• I tested the output JSON on GitGalaxy.io OR the Airgap Observatory.
• Flexbox constraints, HUD elements, and 3D rendering remain intact.

The Differential Scan Acknowledgement

• I understand that my PR will be subjected to a Full Differential Scan.
• I have provided the link to the specific repository this PR addresses so it can be tested alongside the 80-repo calibrated baseline.
• I believe these changes will measurably improve the engine's Accuracy, Speed, Utility, or Ethos without causing regressions.

[github-actions]

🐦‍⬛ Muninn Security Scan

✅ No security issues found.

🐦‍⬛ Powered by Muninn · Skald Lab