18 prioritized findings (6 HIGH, 6 MEDIUM, 6 LOW) filtered against what is already deployed on Hetzner. Covers app-layer issues like login rate limiting, GraphQL injection, SSRF, GDPR/Sentry PII, dependency pinning, and CSP headers. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>