- Extend SourcesConfig with GoogleAPIKey, GoogleCX, BingAPIKey, YandexUser, YandexAPIKey, BraveAPIKey - RegisterAll registers 8 Phase 11 sources alongside 10 Phase 10 sources (18 total) - cmd/recon.go reads search engine API keys from env vars and viper config - Guardrail tests updated to assert 18 sources
Closes 2 verification gaps: 1. --sources=github,gitlab flag filters registered sources before sweep 2. Findings persisted to SQLite via storage.SaveFinding after dedup Also adds Engine.Get() method for source lookup by name.
- cmd/recon.go owns reconCmd with full and list subcommands - Wires pkg/recon.Engine.SweepAll + Dedup with ExampleSource registered - Adds --stealth, --respect-robots (default true), --query flags - Removes reconCmd stub from cmd/stubs.go
