hardcode-detection

Evidence-based read-only detection of production hardcode across frontend and backend languages: user-visible strings bypassing i18n, fixed API responses, endpoints/hosts, tenant or environment values, placeholder content, and static business data. Use for requests to find hardcoded text/data/config, i18n bypasses, magic production values, or backend/frontend literals without treating every string literal as a bug.