Added

• Location now has start_col/end_col fields — all findings precise to column level
• FunctionInfo/ClassInfo have name_col/name_end_col — parser records identifier position
• ImportInfo has col — import statement column position
• Terminal output shows file:line:col when column info available
• SARIF output fills startColumn/endColumn (1-based per spec)
• LSP diagnostics use precise column range

Changed

• All 37 builtin plugins now point findings at the function/class name, not the entire body
• Line-scanning plugins (unsafe_api, hardcoded_secret, todo_tracker, error_handling) report exact column
• WIT records gain column fields — location.start-col/end-col, function-info.name-col/name-end-col, class-info.name-col/name-end-col, import-info.col — breaking change for WASM plugins