v3.8.0

• Fix a crash in auth coverage on Clerk/Next.js apps: the catch-all middleware matcher (which contains ] inside character classes) truncated the parser and threw 'Unterminated character class' — matcher parsing is now string-aware and matcher-to-regex never throws
• Understands Clerk createRouteMatcher protect-lists for precise coverage, and no longer counts non-auth (i18n/analytics) middleware as protection
• Verified on real middleware files (0 crashes); no rule or tool changes (441 / 37); gate green (PASS/A/0)