Detekt security rules for Ktor: missing route authentication, insecure cookies, permissive CORS, weak JWT secrets, missing SSL redirect, missing rate limiting, Exposed ORM injection, hardcoded database passwords, and more.