Endpoint Audit

Write auditEndpoints(routes) — routes is an array of { path, method, authRequired, rateLimited, validatesInput }. A route is CRITICAL when: authRequired false AND method !== "GET"; or rateLimited false AND path includes "login|register|reset". A route is a WARNING when it validatesInput false. Return { critical: n, warnings: n }. State-changing unauthenticated routes are the classic breach vector.