balance(levels): apply 4 valid analyser recommendations (refs #19)

[hyperpolymath]

Summary

Applies the four valid recommendations from `balance-report.json` to `LevelConfig.res`. The three `guard_patrol_radius` recommendations were skipped — those values were corrupted by the analyser bug fixed in #128 and need a re-run before they're trustworthy.

#	Level	Parameter	Change	Mechanism
1	city	alert_threshold	0.25 → 0.40	`hasPowerSystem: false → true` (+0.15)
2	security	defence_density	0.190 → 0.143	drop `cascadeTrap` from DB-SERVER
3	backbone	guard_spawn_rate	1.2 → 0.80	remove edge AntiHacker (x=700); Expert count 3→2
4	backbone	defence_density	0.524 → 0.381	drop `cascadeTrap`+`timeBomb` from NA-BACKBONE; drop `cascadeTrap` from ATLAS-ROUTER

Rationale per rec is in the commit body. Gameplay impact:

• Tutorial city: marginally less trivial — 99.8% → expected ~85% win rate
• Security: 64% trap-deaths → unhooks the cascade chain
• Backbone: 0% → target 15-25% win rate (the long-standing punishingly-hard outlier)

Follow-up

Three `guard_patrol_radius` recommendations remain ungated:

• city.guard_patrol_radius
• dmz.guard_patrol_radius
• scada.guard_patrol_radius

These need `balance-report.json` regenerated against the #128 analyser fix (which adds a `mean_patrol_radius` field to `LevelStats` and uses it correctly). Tracked separately.

Refs #19

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 71 issues detected

Severity	Count
🔴 Critical	11
🟠 High	18
🟡 Medium	42

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in build-validation.yml",
    "type": "missing_timeout_minutes",
    "file": "build-validation.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in cflite-pr.yml",
    "type": "missing_timeout_minutes",
    "file": "cflite-pr.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in containers.yml",
    "type": "missing_timeout_minutes",
    "file": "containers.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in containers.yml",
    "type": "missing_timeout_minutes",
    "file": "containers.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dco.yml",
    "type": "missing_timeout_minutes",
    "file": "dco.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence