Safety check for vibe-coded apps: catches legal and security traps like client secrets, COPPA/kids, open RLS, licenses.