Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find …