Find authorization declarations

Report directly declared, type-attributed Spring Security and jakarta/javax security annotations on Java types and methods, including declarations without endpoints. Preserves source positions, overload signatures, and explicit raw attributes with resolution states. Does not change source or infer inherited, composed, effective, route, or runtime authorization behavior.