ln-647-configuration-boundary-auditor

Audits architecture config boundaries: typed settings, scattered env reads, config leakage, and layer ownership. Use for config architecture.