feat: add WebSocket scanner for malicious handlers

[idiottrader]

Summary

This PR adds a WebSocket security scanner for ISNAD as requested in #3.

Features

• ✅ Detects 7 malicious WebSocket patterns:
  • Unauthenticated connections
  • Data exfiltration (passwords, tokens)
  • External data forwarding
  • Stealth connections
  • Keylogger patterns
  • Clipboard stealing
  • Session hijacking
• ✅ JavaScript/TypeScript support
• ✅ Python support (ast + regex)
• ✅ Threat level classification (Critical/High/Medium/Low)
• ✅ Confidence scoring
• ✅ JSON/SARIF output support
• ✅ CLI interface

Usage

# Scan single file
python websocket_scanner.py ./suspicious.js

# Scan directory
python websocket_scanner.py ./src/

# Output report
python websocket_scanner.py ./src/ --output report.json

Test Coverage

• Unit tests for all 7 detection patterns
• Integration tests for JS/TS and Python
• Manual testing on sample malicious packages

Closes #3

[vercel]

@idiottrader is attempting to deploy a commit to the Rapi's projects Team on Vercel.

A member of the Team first needs to authorize it.