[Feature] Code Review External Repo Quality and Bug Finding

[djm81]

Summary

Improve the specfact code review module for use on external Python repos: add a bug-finding mode (semgrep security rules + CrossHair extended timeouts), suppress icontract noise on repos that don't use it, and fix the sidecar route extractor's venv self-scan bug.

Surfaced from external-repo validation against 10 OSS repos including crewAI, gpt-researcher, Flask, requests, SQLAlchemy, and DRF.

Scope

• packages/specfact-code-review — bug-finding mode, noise suppression
• packages/specfact-codebase — sidecar extractor correctness

Changes

• #174 — Code review bug-finding mode and sidecar venv self-scan fix

Parent Epic

Part of #162 — [Epic] specfact code