sast: Phase 1 triage — fix Semgrep rule scope, dismiss 47 alerts#152

grove merged 5 commits intomaingrove/pg-trickle:mainfrom

sast-review-1grove/pg-trickle:sast-review-1Copy head branch name to clipboard