Find JDBC connections with empty passwords

Finds DriverManager.getConnection(...) calls whose password argument is empty or whitespace-only, or whose URL embeds a password= query parameter with no value. Connecting to a database without a password grants unauthenticated access; the password should be sourced from configuration or a secret manager instead.