CI Gates for AI-Generated Code: Catching Auth Regressions and Query Risk Before Merge

Tests check behavior. They don't check who's allowed to trigger it. Copilot, Cursor, and similar tools are increasingly doing the actual typing on non-trivial refactors — and they're good at it, in th