Scanner rule definitions

Defines the scanner's rule identifiers, severity, supported evidence, and limitations.

The rule catalog is shared by evaluation and validation code. It describes what each heuristic can detect without claiming to establish runtime correctness.