Python fp and docs updtes (#58)

* refactor: Update comments for clarity and add expectations.json files for performance metrics

* feat: Implement FP guard for JS/TS local-collection receivers to suppress missing ownership checks

* feat: Enhance Rust parameter handling to classify local collections and prevent false ownership checks

* refactor: Simplify code formatting for better readability in multiple files

* refactor: Improve UTF-8 sequence length handling and enhance clarity in loop iteration

* feat: Update Java and Python patterns to include new security rules

* refactor: Improve comment clarity and consistency across multiple Rust files

* refactor: Simplify code formatting for improved readability in integration tests and module files

* refactor: Improve comment formatting and enhance clarity in assertions across multiple files

tests/benchmark/corpus/python/auth/vuln_fastapi_route_no_dependencies.py

@@ -0,0 +1,19 @@
+"""
+Vulnerable counterpart to safe_fastapi_route_dependencies_auth.py: same
+shape but with NO `dependencies=[Depends(...)]` keyword arg on the route
+decorator.  The FastAPI ownership-check rule must still fire — the
+recognizer must not blanket-suppress every FastAPI route, only those
+with an actual dependency-injected auth check.
+"""
+from fastapi import FastAPI
+
+router = FastAPI()
+
+
+@router.delete("/{connection_id}")
+def delete_connection(connection_id: str, session):
+    """No auth — must still fire missing_ownership_check."""
+    connection = session.scalar(select(Connection).filter_by(conn_id=connection_id))
+    if connection is None:
+        raise HTTPException(404, "not found")
+    session.delete(connection)