Ln 654 Resource Lifecycle Auditor

This is a specialized auditor for resource lifecycle bugs in database-heavy applications. It checks for six common patterns: session scope mismatches where a DB connection lives for an entire request but only gets used once, streaming endpoints that hold connections open for minutes, missing cleanup in error paths, and pool configuration issues. The two-layer detection is smart: it scans for candidates first, then verifies with context using hex-graph to trace call paths when available. Particularly good at catching the subtle ones like FastAPI endpoints that inject a session via Depends but only touch it in the first 20% of the function. Writes findings with severity ratings and calculates a compliance score. Best used during code review or before deploying long-running async services where connection pool exhaustion can quietly kill you.