fix(detector): anchor nodes for bicep/dockerfile/shell/proto imports … #158

Job	Run time
SBOM (SPDX + CycloneDX)	16s
Semgrep (SAST)	24s
Gitleaks (secret scan)	16s
jscpd (duplication < 3% on touched code)	14s
OSV-Scanner (SCA)	7s
Trivy (filesystem + container scan)	14s
	1m 31s

Provide feedback