Retune quality precision false positives

[alxxjohn]

Summary

• retune UI boolean/cardinality naming precision for inferred UI booleans and common collection names
• raise multiple-responsibilities threshold only for React/UI boundaries while keeping routes/server functions visible
• treat local Date/URL/FileReader/Image/canvas/HMAC builders, Object.assign into local patches, and local collection aliases as local mutation
• allow UI-only command helper names such as confirm/pick/disarm without suppressing server positives

Legal Nest dogfood

• published v1.3.7 baseline: 2204 findings
• local branch scan after retune: 1961 findings
• net: -243 findings
• biggest movements: boolean-not-predicate -87, multiple-responsibilities -75, hidden-mutation -34, command-query-mix -21, cardinality-mismatch -16

Tests

• env -u GOROOT GOCACHE=/private/tmp/codeguard-go-cache go test ./tests/checks