v1.36.209

UIB-03: bounded UI surface scanner with shared secret patterns, aggregate security findings, digest-only review projection and syntax controls; local unreleased candidate.