Catch SSRF and credential leaks in UTCP manuals, MCP server configs and OpenAPI specs, before they reach CI.