De-slop: remove every em-dash + banned words across all modules + capstone (#94)

Co-authored-by: claude <claude@jpaul.io>
Co-committed-by: claude <claude@jpaul.io>

modules/15-security-scanning/lab/config.py

@@ -1,4 +1,4 @@
-"""Cloud-sync config for tasks-app — a realistic snapshot of what an AI hands you.
+"""Cloud-sync config for tasks-app: a realistic snapshot of what an AI hands you.
 
 Asked to "sync tasks to a cloud service," a model will produce something like this: it works, it
 reads naturally, it passes lint and tests... and it carries two planted flaws: a live credential
@@ -24,15 +24,15 @@ def sync_headers() -> dict:
 
 # --- The problem the SAST scanner should flag (Gate 3) -----------------------------------------
 # AI-classic: "sign" the request body with a quick hash. MD5 is broken for anything
-# security-relevant — a textbook weak-crypto idiom. A secret scanner won't catch this (it's not a
+# security-relevant; a textbook weak-crypto idiom. A secret scanner won't catch this (it's not a
 # secret); a SAST tool like bandit will (it's insecure code you wrote). DO NOT imitate.
 def sign_payload(body: str) -> str:
     return hashlib.md5(body.encode()).hexdigest()
 
 
 # --- The fix (Part C) --------------------------------------------------------------------------
-# Read the secret from the environment instead of committing it. Proper secret management — env
-# files, secret stores, per-environment config — is Module 17. This is just enough to make the
+# Read the secret from the environment instead of committing it. Proper secret management (env
+# files, secret stores, per-environment config) is Module 17. This is just enough to make the
 # scanner go quiet honestly.
 #
 # import os