[Inventory] API inventory & component fingerprinting

[emmanuelgautier]

Description

Fingerprint deployed API surface and components to catch stale, debug, or vulnerable versions.

Checks to implement

• Deprecated API version still reachable
• Debug / staging endpoints in production
• PII / secret regex on responses
• Private IP / internal hostname disclosure
• Vulnerable component version match (CVE)
• Third-party calls over plaintext HTTP

Tier rationale

Static fingerprinting and pattern matching on individual responses.

Milestone completion target

~55 cumulative checks · REST + GraphQL + gRPC + WebSocket coverage · 1,000 GitHub stars benchmark.