check-safety FIXTURE_DIR
FAIL 1 1 secret env var read(s) outside config.Load() — secrets must flow through Config → DI
  internal/service/handler.go:17 — os.Getenv("JWT_SECRET")
FAIL 2c 1 CMS backend go.mod violation(s)
  FIXTURE_DIR/go.mod [missing-go-mod] missing go.mod
FAIL 14 1 raw SQL statement(s) found outside sqlc/Bob
  internal/service/handler.go:22 SELECT id, name FROM users WHERE active = true
FAIL 15 1 err.Error() leak(s) to HTTP clients — log via slog.Error() and return a user-friendly message
  internal/service/handler.go:27 http.Error(w, err.Error(), ...) — leaks internal error
FAIL 17 1 TODO marker(s) found — ship explicit behavior, not placeholders
  internal/service/handler.go:14 // TODO: add proper initialisation

32 checks: 14 ok 13 skip 5 fail -> FAIL