Two general interprocedural call-graph bugs fixed (this.method() calls and
cross-class calls never resolving), plus new CSharpCodeProvider code-
injection detection, Process.Start command-injection coverage, and LDAP
attribute-matching generalization. See CHANGELOG.md for the full account.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DBVYrcFsWsY1dSr4h5Pms4