FLAW021 — Hardcoded IV / nonce / salt. Destroys confidentiality in CTR
and AEAD modes; breaks key-derivation uniqueness.
Constants
NAMED = /\b(iv|nonce|salt)\s*=\s*(?:"([^"]{8,})"|
Bytes\[[^\]]+\]|
Slice\[[^\]]+\])/i
iv = "abcdef..." / nonce = Bytes[0, 1, 2, ...] / salt = "..."